All about Microsoft 365
In a previous article, we covered how the newly introduced Invoke-ChangeMeetingOrganizer cmdlet can be used to change a meeting s organizer in Exchange Online. While the cmdlet does handle recurring meetings, it can only update one (master) meeting at a time, making the realistic transfer all meetings from user X scenario Continue reading Primer: Use Invoke-ChangeMeetingOrganizer to bulk change…
Microsoft is rolling out one of the coolest "quality of life" improvements we have received in a while. In this article, we explain how you can use the Invoke-ChangeMeetingOrganizer cmdlet to change a meeting's organizer, as well as how some of the inner workings of the feature look like. Being able to change the organizer of (future) meetings is something that most organizations will greatly…
This one will probably be of value to few Microsoft 365 tenants only, but it is on my to do list, so here goes. In June 2026, the MC1420903 message center post informed us about upcoming changes to Dynamic Distribution Group (DDGs) provisioning in Exchange Online. The changes aim to Continue reading PSA: Duplicate Dynamic Distribution Group detection in Exchange Online
In this article, we take a quick look at the recently introduced sponsorOf property/relationship for Graph API user objects. We examine how to leverage the property, provide few Graph query examples, and even correct some of the inconsistencies from the official documentation. As the sponsorOf property is only available in beta (preview) currently, things can change in the future, so exercise some…
Microsoft introduced (Entra ID) Group insights in the beginning of the year. Still in public preview, the feature provides at a glance dashboard to highlight some common scenarios, as well as more detailed views in each supported category. While there is nothing revolutionary in it, and it does not address Continue reading Working with the group insights (analytics) Graph API
Check out the newly introduced SharePoint Online throttling report, now available under the /beta Graph API endpoint. Continue reading SharePoint Online throttling report
We take yet another look at the (lack of proper) APIs for managing agents and Copilot policy settings within Microsoft 365. Spoiler alert, things haven't changed much since last time. Continue reading The sad state of governance APIs for Copilot and Agent 365
A quick look at the recently introduced SharePoint API usage report. While the report seems to complement the already available Graph API usage one, it gets its own endpoint and even a settings to control its data collection. The latter point is not clearly explained in the documentation, so hopefully this article helps you get started with the report. Continue reading First look at the SharePoint…
As part of MC1338823 (Microsoft Purview Data Loss Prevention – Block external domain or user access for SharePoint and OneDrive), Microsoft is rolling out new and more granular external sharing controls. In this article we take a look at how to configure the new actions and how the end user experience looks like in the ongoing public preview. Continue reading More robust external sharing controls…
It is July morning, which means the latest edition of the best Microsoft 365 book out there is now available! For this year s edition, we ve made some changes and introduced two new books, which you can get either standalone or as part of the main bundle. You can find all Continue reading Microsoft 365 for IT Pros (13th Edition) and some other news
In this article, we discuss how to convert Exchange folderIds (as returned by the Get-MailboxFolderStatistics cmdlet) to the RestId identifiers employed by the Graph API. Some additional use cases of the various Exchange identifiers are addressed as well. The accompanying script can be used to generate a report of all folders within a given mailbox, even those not accessible by the end user, along…
Microsoft is previewing support for sensitivity labels and directory settings for Entra ID security groups, with the intent of controlling guest user access. In our previous article we explored both methods, and now we examine how restrictions are enforced across the service. Unfortunately, there is a long list of known issues and limitations you need to be aware of. Read on for the details...…
Microsoft is previewing support for sensitivity labels and directory settings for Entra ID security groups, with the intent of controlling guest user access. In this article we explore how both methods can be configured, and later on, we examine how restrictions are enforced across the service. Unfortunately, there is a long list of known issues and limitations you need to be aware of. Read on for…
Over the years, we ve covered Entra application management policies several times, most recently in this article. If you need a refresher, app management policies allow you to configure various restrictions on application and service principal objects in your tenant, such as controlling the lifetime of client secrets or blocking their Continue reading Configure excluded callers for Entra…
In this article, we provide few simple examples on how to leverage the Agent 365 APIs in order to control availability of agents within your Microsoft 365 tenant. The currently supported operations include blocking and unblocking agents, allowing them for a set of users, deploying to a set of users and reassigning the owner for "orphaned" agents. Some limitations still exist, as rollout of the API…
I was today s years old when I found out that we have an UI to review Outlook Actionable Messages providers added within a tenant, or that such providers can be scoped to the organization, or even specific mailboxes. For the vast majority of tenants, this will likely not be of Continue reading Did you know: Actionable Messages Admin Dashboard
Over the past few years, Microsoft has been slowly ramping up the profile experience. The recent addition of certifications and awards is what prompted me to refresh my memory on the /profile endpoint, so let s take a deeper look, shall we. As a reminder, each user within the Graph is Continue reading Awards, certifications and working with the /profile Graph API endpoint
The first iteration or (read-only) methods and endpoints for Agents is now available on the Graph. In this article, we explore the currently available LIST and GET methods and the details they reveal about agents within Microsoft 365. More to come as Microsoft updates the API... Continue reading First iteration of Agent 365 APIs now available on the Graph
In this two-article overview of the recently introduced Tenant Governance, we take a look at the feature set Microsoft has bundled into the product. Part one will set the stage by introducing the basics, after which we move on to cover the process of establishing a governance relationship between tenants. In part 2, we cover the tenant discovery process, secure tenant creation and some additional…
In this two-article overview of the recently introduced Tenant Governance, we take a look at the feature set Microsoft has bundled into the product. Part one will set the stage by introducing the basics, after which we move on to cover the process of establishing a governance relationship between tenants. In part 2, we cover the tenant discovery process, secure tenant creation and some additional…
A new endpoint is available on the Graph API to query and manage the Ownerless group policy within Microsoft 365... Continue reading Ownerless Group Policy finally supported by the Graph API
A Graph SDK for PowerShell based script to export all BItLocker Recovery keys backed up to your Entra ID tenant. Keys are securely stored in the output and can only be accessed by the same user and device. Optionally, you can "unscramble" the output and store the recovery keys in plain text. Continue reading More secure version of the Bitlocker recovery keys export script
Earlier this year, we explored the newly added functionality to restrict access for multi-tenant Entra ID integrated apps. Now Microsoft has provided a simple UI to manage the feature, so you no longer have to rely on the Graph API methods. You will find the relevant bits under the Entra Continue reading New UI to manage allowed tenants for Entra ID integrated applications
For years, we ve been hearing how the Graph API is the de facto control surface of Microsoft 365 and should be used for all integrations/automations and apps. Yet, years down this journey, the real story still shows fragmented coverage across even the basic workloads (*cough* Exchange Online *cough*). On the Continue reading PSA: Microsoft deepens the disconnect between PowerShell and Purview UI
A Graph API based PowerShell script to generate a storage report for your personal OneDrive. The script allows you to generate a report down to individual items, with version history included, and can generate output resembling that of SharePoint's Storage Metrics tool. To minimize the potential impact, we ask you to use your own Entra ID application, where you control the access and permissions…
Microsoft is currently previewing the Catalog access reviews functionality. also known as user-centric reviews. In this article, we show how the feature works, mention some of the annoyances it inherits, and discuss some basic operations via the Graph API. Finally, we close with a quick look at the custom data provided resource functionality, aka access reviews for "disconnected apps", aka…
In what is possibly one of the most impactful Microsoft 365 releases this year will bring, the public preview of the Unified Tenant Configuration Management APIs was just released. In these series, we will go over the tool, try to explain its purpose, building blocks and requirements, with code samples included. For customers that have used Microsoft 365 DSC or similar configuration-as-code tools,…
In what is possibly one of the most impactful Microsoft 365 releases this year will bring, the public preview of the Unified Tenant Configuration Management APIs was just released. In these series, we will go over the tool, try to explain its purpose, building blocks and requirements, with code samples included. For customers that have used Microsoft 365 DSC or similar configuration-as-code tools,…
A quick look at the recently introduced /admin/exchange/tracing/messageTraces Graph API endpoint to fetch Exchange Online message trace details. It turns out this is just a wrapper for the Get-MessageTraceV2/Get-MessageTraceDetailV2 cmdlets, with all the benefits and downsides this entails to. Read the article for more details. Continue reading Fetch message trace data via the Graph API
2026 is the year in which Microsoft plans to pull the plug on EWS, and before this happens, I m taking some time to go over my code samples in order to update them to the Graph API or alternatives, as needed. One such code sample I ve used over the years Continue reading Still no good solution for cleaning deleted items via the Graph API