Manage PIM Role Assignments with the Microsoft Graph PowerShell SDK
This article describes how to create eligible and active PIM role assignment requests using cmdlets from the Microsoft Graph PowerShell SDK. Although the PowerShell code is straightforward, Microsoft recommends using the Entra admin center for Privileged Identity Management. But you can automate the management of role assignment requests if you want to. https://office365itpros.com/2024/11/14/pim-role-assignment-powershell/Extracting Value from Entra Sign In Logs
Entra ID sign-in data is a valuable source of information for Microsoft 365 tenant administrators. Although you can browse sign-in data through the Entra admin center, working with the data through PowerShell reveals all sorts of possibilities for analysis to answer questions about who is connecting to your tenant. https://practical365.com/entra-id-sign-ins/Analyzing Microsoft 365 Copilot Interactions Using Compliance Records
Every time Microsoft 365 Copilot interacts with a user, the Microsoft 365 substrate captures the Copilot interaction as a compliance record in the user's mailbox. By fetching and analyzing the compliance records, we can understand how the user interacts with Copilot. This article discusses how to retrieve and analyze the records with the Microsoft Graph PowerShell SDK. https://practical365.com/copilot-interactions/
sharepoint online DisableCompanyWideSharingLinks
reposting Igor's question here as per MSFT's suggestion : "How can I disable the 'Share with entire organization' option globally for OneDrive and SharePoint in Microsoft 365? I've examined the documentation athttps://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-limit-sharing?view=o365-worldwide#sharing-with-specific-peopleand discovered PowerShell commands such as 'Set-SPOSite -Identityhttps://contoso.sharepoint.com-DisableCompanyWideSharingLinks Disabled' for SharePoint sites and 'Set-SPOSite -Identityhttps://contoso-my.sharepoint.com/personal/my_alias_contoso_com-DisableCompanyWideSharingLinks Disabled' for OneDrives. The challenge is executing these commands for each site and user in our environment. Is there a method to apply this globally across the entire organization?"Per-User MFA State Added to Tenant Passwords and MFA Report
A Microsoft Graph update makes per-user MFA state available for user accounts. Being able to access the data means that we can include it in the User Passwords and Authentication report. You can now see if accounts are disabled, enabled, or enforced for per-user MFA along with all the other information captured about passwqrd changes, MFA authentication methods, and so on. https://office365itpros.com/2024/06/14/per-user-mfa-state/How I Write PowerShell Scripts for Microsoft 365
The question of how best to write PowerShell for Microsoft 365 was asked during a TEC 2024 PowerShell workshop. There are many variables, and one has the right answer. To start the ball rolling, this article describes how I write PowerShell for Microsoft 365 using a variety of modules such as Exchange, SharePoint, Teams, and the Microsoft Graph PowerShell SDK. https://office365itpros.com/2024/10/11/write-powershell-for-microsoft-365/Practical Graph: Reporting Shared OneDrive for Business Files
Oversharing of information is a major concern in the AI era. This article describes how to write a script to report file sharing for OneDrive for Business accounts. The report details the files shared, the type of sharing link and access, and who can access the files. It's an example of using the Microsoft Graph PowerShell SDK to understand what's happening in a tenant. https://practical365.com/onedrive-file-sharing-report/Microsoft Retires the Revoke-SPOUserSession Cmdlet
Unsurprisingly, Microsoft announced the deprecation of the Revoke-SPOUserSession cmdlet for November 2024. The cmdlet is replaced by the Revoke-MgUserSignInSession cmdlet, which works across Microsoft 365 rather than just SharePoint Online. All of this happened while the 2nd annual PowerShell Script-Off happened at TEC 2024 and competitors struggled with what to do to secure a user account for an ex-employee. https://office365itpros.com/2024/10/04/revoke-spousersession-deprecation/Finding and Removing Messages from Exchange Online Mailboxes
Users receive all manner of notification messages from different sources. These messages are of no great value after a few days, so here's a script to find and remove messages to clean up mailboxes. All written using cmdlets from the Microsoft Graph PowerShell SDK. https://practical365.com/remove-messages-graph-sdk/
