gdap

2 Topics

No more Graph API rights for new customers tenants with GDAP
Hi, We use a powershell script with the Graph module to administer the users of our M365 clients who each have a dedicated tenant with a GDAP. We use App authentication which has all the necessary rights. For all existing tenants: For new tenants: Any idea?
Arnaud_K
Dec 08, 2023 Place Business Applications for partners
1.2KViews
0likes
4Comments
Using GDAP with Purview Roles for Search and Purge
I'm facing an issue that I believe may be related to how my current employer has set up GDAP, but I am struggling to get a solid answer on the solution to the issue as it's not clear if the problem is simply a limitation through GDAP or something not configured correctly. Scenario: We have a GDAP relationship set up with 20+ clients that provides us with Entra roles such as Security Operator, User Administrator, etc. Various Entra roles to perform common tasks as an MSP We are currently unable to perform email purges using Explorer in Defender or Purview, as the role required appears to be only assignable to a user account or group that exists in the tenant in question, and as we are acting through GDAP, there is no account or group to give that role to. On the back of this, I have several questions/requests: Should a GDAP relationship also create some group or guest/external user that roles of this nature can be assigned to? Is there something specific we need to do through our GDAP configuration to allow us to search and purge emails?
Solved
Thortonne
Dec 12, 2025 Place Business Applications for partners
66Views
1like
4Comments