Azure Automation

3 Topics

ApplicationAccessPolicy vs Azure Automation Account
Hi all. I have an Azure Automation Account (AAA) with enabled system managed identity. I added Graph API permission Mail.Send (application) to this identity and in script I'm able to send behalf of any email mailboxes. It works correctly. I want to restrict this AAA to specific mailboxes. So, I followed the https://learn.microsoft.com/en-us/graph/auth-limit-mailbox-access. I created Service Principal for AAA by "New-ServicePrincipal" command and created new Application Access Policy. When I test it via Test-ApplicationAccessPolicy command I see correct result. But AAA is still able to send an email behalf of an email mailbox. Do you have the same experience?
Solved
JanRezab
May 22, 2025 Place Exchange
90Views
0likes
2Comments
manage Exchange Online Mail Contacts with Graph API
Has anyone a solution to manage Exchange Online Mail Contacts over Graph API? This would be the preferred way. On Microsoft Learn I've found this https://learn.microsoft.com/en-us/graph/api/resources/orgcontact?view=graph-rest-beta but it's still in beta and can't be used to create Contacts rn. Otherwise, I would try to achieve this with the https://learn.microsoft.com/en-us/powershell/module/exchange/new-mailcontact?view=exchange-ps and Azure Automation. I've never got in touch with Azure Automation but what I've seen, it should be possible, I think.
Solved
preuley30
Apr 27, 2023 Place Exchange
2.8KViews
0likes
2Comments
Managing shared mailbox access using PowerShell (at onboarding) using modern authentication
Hello all, as the Microsoft Exchange team currently has a fixed final date on when basic authentication will be disabled we are left with a big question mark how we will automatically manage out shared mailbox access at the onboarding of our users. Right now we basically have a powershell script running that connects to exchange online using a pssession with basic authentication (which has no support for modern authentication). However the EXOV2 module does have support for modern authentication, however you cant set mailbox access using this module, as it does not have the required CMDlets to do so. So I wondered, has anybody found the way to manage (shared)mailbox access rights using modern authentication, so not basic authentication? I've looked at the Microsoft Graph, using appplications, possibilities in Azure Automation but nothing has quite solved it yet. The only that somewhat worked was using the Azure cloud shell, however you cant automate using that shell as far as I know.
Solved
Twan_Duvigneau
Nov 08, 2021 Place Exchange
1.8KViews
0likes
4Comments