Primer: How to Use RBAC for Applications to Control App Use of the Mail.Send Permission
The temptation to use the Mail.Send application permission in scripts can lead PowerShell developers into trouble because the permission allows access to all mailboxes, including sensitive executive and financial mailboxes. Fortunately, RBAC for Applications allows tenants to control the access that apps have to mailboxes and other Exchange content. All explained here with an example script to test RBAC of Applications. https://office365itpros.com/2026/02/17/mail-send-rbac-for-applications/
No labs for MB-500 in skillable and xtreme labs (for all MB series)
Hi, From past few months, we are unable to find the labs for MB-500. It's causing us trouble to do the trainings. Skillable and Xtreme labs providers are saying there is a problem from Microsoft end only. Kindly advise us when can we get the labs available.
Third-party access via Organisational Link
Hi, Previously when logging into my personal account on a Web Browser, it flashed up with what is the typically an organisational message about an IT administrator. After being ping-ponged back and forth from the Microsoft Support teams, it's been suggested there is an organisational link with my personal email account, which absolutely should NOT be the case. My concern is if someone has linked my email with an organisational account, then they are privy to a lot sensitive information from personal finances to healthcare (this has also correlated with some odd behaviour on certain devices). The agents that I have spoke to have not yet provided me with a viable solution to removing any links to an organisational account, nor getting a list of any organisations or entities that have been linked to my personal account. Does anyone have any ideas as to a way around this? Many thanks.
Can't use a SPN in a PowerBi dashboard to access SharePoint lists
Hoping you can help with an ongoing issue I have. I have a PowerBi dashboard I built using regular account to fetch some SharePoint lists and uploaded it to PowerBi for others to view Now in PowerBi portal I want to change the credential from my account to an SPN. I've read what feels like a thousand articles describing the process to create the SPN 99% all the same. Yet when I go into Powerbi portal, edit the semantic model for the dashboard, click edit credentials, select Service Principal put in the tenant ID the Service principal ID (yes using the app id, in fact I tried everything) the service principal key (the secret) and choose any privacy level it fails 100% of the time. Error is: Failed to update data source credentials: The credentials provided for the SharePoint source are invalid. Same error regardless of what privacy level I choose. I'm sure the secret is correct also. Just for fun I tried the Secret ID and the Object ID in place of the Application ID for the Service principal ID field. All failed same error. I'm sure the secret is correct also. The SPN has Graph sites.read.all, Graph user.read and SharePoint Sites.Read.All api permissions configured. All are consented. Everything seems right but gives me the error failed to retrieve oauth token 100% of the time. Am i missing something else? More API permissions maybe? Do i still need ot actually add the SPN to the Sharepoint site itself even though I has API permissions SharePoint Sites.Read.All? I've done days of research and all I find is lots of people with same or similar issue but not resolution. Is this a bug? Help me I'm desperate to get this fixed or I'm going to have to allow people to bypass MFA across my organization which I cant have.
Account blocked
My account has been blocked and when I try to reset my password and do the verification with my phone number, it says it isnt available. I then put in a different email to send the code too and I have filled out the recovery form but it has rejected me, even though, I put all the correct information in. I have tried over and over. Everything comes in to that email so I really need access back for work purposes as well as private. Please can someone help me as I cant speak to a customer support agent!
Account name, email address relationship and changing these
Hello, I am trying to help an elderly friend who has been left behind by technology and seemingly endless changes to Microsoft and other products. I am not exactly young (72) and between the 2 of us we cannot understand what we need to do. He has problems because the email provider used for his accounts (ntlworld.com) does not work any more AND he has forgotten / lost his MS account passwords which makes changing / correcting stuff challenging as we have found out. Not a good place to start but that is what we have. Firstly, can someone explain the "structure" of a Microsoft (MS) account in terms of these bits of data: Account name / title / whatever (e.g. John Smith) Account email address (e.g. email address removed for privacy reasons) Secondary (back up) email address (e.g. email address removed for privacy reasons) Does the account name need to be the primary email or is the account user e.g. is John Smith simply "data" about the account whose main ID is mailto:email address removed for privacy reasons What is linked to what and in what way? I ask this because I log in to my MS account using an email address and password and I don't understand if this is what everyone does or is it one of several account IDs. We also had fun trying to add secondary email addresses and getting them verified - trying to verify them, he received an email from MS (to the newly added 2nd email address) telling him to click the link in the email. When he did this a pop up appeared telling him that he was logged into the wrong account. It is a fairly meaningless message (sadly like many MS messages to users). So, a good start would be to get an understanding from someone (in plain English and not tech speak) so I (and he) can clearly understand what we have got and then work out a way to get to our eventual target. It should keep us amused over the winter!! Thank you in advance, FLocked out from O365 admin account
Hi! I am locked out from my non-protif organizations O365 admin-account. When trying to login, it ask for the authenticator code, but my authenticator app tells me to login and to login it needs an authenticator code..... I cant contact the O365 support since I cannot login. I found a phone number and talked to some AI bot, but it could not understand when I said the domain name of our organization and shut me down after 3 attempts. So - I have no way to login and handle my organizations account. Can someone please advice how to solve this, or how to get in touch with an actual human being in O365 support???
my microsoft account is hacked
5 days ago, i was trying to verify my account at a discord server, then i realize that they are hacking my account because of incoming security mails. they changed my account security mails. and they even changed my mail to mailto:email address removed for privacy reasons (my mail was mailto:email address removed for privacy reasons). i tried to save my account through "save your account", but it didnt work because i dont know the birth date of the e mail( i usually dont use my own (im not under 18)). i have bunch of proof that it was my e mail. i bought xbox pc game pass subscription 2-3 months ago and i bought minecraft pc edition 1 months ago with that microsoft account. i have all payment info etc. please give my microsoft account back. i am also uploading screenshots. please help me 😕 (sorry for poor language, the screenshots is turkish, if it is possible i need a turkish support people )
Compliance licenses at tenant level
Hi, We are a small organization of about 200 employees, and we have following requirements. DLP policies configuration at Exchange, OneDrive, SharePoint BYOD security Users should not be able to send files outside the org And so on as we evaluate We already have M365 Business Premium. However, after researching we figured out that M365 Business premium will alone not solve our requirements. May be compliance license will. We want to apply security policies at tenant level in our organization but definitely do not want every user to get licenses as this will be expensive for us and there is no requirement at all for our users. The question is, Is there a way to solve the above scenario?
