App instance property lock gets a scoping mechanism (and some other updates)

Back in 2023 Microsoft launched the app instance property lock feature. While the name likely means nothing to the average admin, the feature does address one serious gap in securing application access, as we explained in our initial article on this. An year later Microsoft toggled this feature on by …

Continue readingApp instance property lock gets a scoping mechanism (and some other updates)

Quick look at the sponsorOf property in the Graph API

In this article, we take a quick look at the recently introduced sponsorOf property/relationship for Graph API user objects. We examine how to leverage the property, provide few Graph query examples, and even correct some of the inconsistencies from the official documentation. As the sponsorOf property is only available in beta (preview) currently, things can change in the future, so exercise some caution when working with it. …

Continue readingQuick look at the sponsorOf property in the Graph API

Working with the group insights (analytics) Graph API

Microsoft introduced (Entra ID) Group insights in the beginning of the year. Still in public preview, the feature provides “at a glance” dashboard to highlight some common scenarios, as well as more detailed views in each supported category. While there is nothing revolutionary in it, and it does not address …

Continue readingWorking with the group insights (analytics) Graph API

First look at the SharePoint API usage report

A quick look at the recently introduced SharePoint API usage report. While the report seems to complement the already available Graph API usage one, it gets its own endpoint and even a settings to control its data collection. The latter point is not clearly explained in the documentation, so hopefully this article helps you get started with the report. …

Continue readingFirst look at the SharePoint API usage report

Container label support and Guest access controls for Entra ID Security Groups (part 2)

Microsoft is previewing support for sensitivity labels and directory settings for Entra ID security groups, with the intent of controlling guest user access. In our previous article we explored both methods, and now we examine how restrictions are enforced across the service. Unfortunately, there is a long list of known issues and limitations you need to be aware of. Read on for the details… …

Continue readingContainer label support and Guest access controls for Entra ID Security Groups (part 2)