How Purview extends administrative units to support SharePoint Online sites

Administrative units (AUs) were introduced all the way back in 2014, when the world was simpler and we talked about Azure Active Directory and Office 365. Intended as the “scoping” mechanism for administrative role assignments, AUs have been a mixed story. Over the years the Entra ID team continued to …

Continue readingHow Purview extends administrative units to support SharePoint Online sites

Graph API adds (limited) support for onPremisesExtensionAttributes for group objects

After a long, long wait, the Graph API finally adds support for onPremisesExtensionAttributes for group objects. It’s not all good news though, as there are some severe limitations in the current implementation, making it impractical. While you should still rely on the proven methods, it is nevertheless a good news and something to keep an eye out for future improvements. …

Continue readingGraph API adds (limited) support for onPremisesExtensionAttributes for group objects

App instance property lock gets a scoping mechanism (and some other updates)

Back in 2023 Microsoft launched the app instance property lock feature. While the name likely means nothing to the average admin, the feature does address one serious gap in securing application access, as we explained in our initial article on this. An year later Microsoft toggled this feature on by …

Continue readingApp instance property lock gets a scoping mechanism (and some other updates)

Quick look at the sponsorOf property in the Graph API

In this article, we take a quick look at the recently introduced sponsorOf property/relationship for Graph API user objects. We examine how to leverage the property, provide few Graph query examples, and even correct some of the inconsistencies from the official documentation. As the sponsorOf property is only available in beta (preview) currently, things can change in the future, so exercise some caution when working with it. …

Continue readingQuick look at the sponsorOf property in the Graph API

Working with the group insights (analytics) Graph API

Microsoft introduced (Entra ID) Group insights in the beginning of the year. Still in public preview, the feature provides “at a glance” dashboard to highlight some common scenarios, as well as more detailed views in each supported category. While there is nothing revolutionary in it, and it does not address …

Continue readingWorking with the group insights (analytics) Graph API