Free tool to manage directory settings in Entra ID

Microsoft still does not provide a GUI to manage Directory settings in Entra ID/Microsoft 365. If you are sick and tired of having to deal with the crappy syntax used in the Graph SDK for PowerShell cmdlets for working with directory settings and their corresponding template objects, this tool is for you. It is a simple windows forms-based UI that allows you to view, add, update and remove setting objects, including those associated with Microsoft 365 Groups. Some other quality of life improvements are also implemented, read the article for all details! …

Continue readingFree tool to manage directory settings in Entra ID

Last used data for authentication methods is now available on the Graph

The lastUsedDateTime property has been added to the authenticationMethods Graph API resource. While not all of the available methods seem to populate data for it just yet, it is still a useful addition and one that can enrich your reports with much needed detail. So tag along if you want to check out some examples on how to query lastUsedDateTime via the Graph API or the Graph SDK for PowerShell. …

Continue readingLast used data for authentication methods is now available on the Graph

New Graph API methods available for Entra ID audit logs operations

In this article we cover some recent additions to the Graph API that bring support for some Entra audit-related operations. We can now get summarized data for user non-interactive, service principal and managed identity sign-in events, via the getSummarizedNonInteractiveSignIns, getSummarizedServicePrincipalSignIns and getSummarizedMSISignIns methods, respectively. We can also get the count of sign-in events per app (signInEventsAppSummary) or overall (signInEventsSummary). Lastly, a metadata-like endpoint that list all currently supported Entra audit log activities has been added under the auditActivityTypes endpoint. …

Continue readingNew Graph API methods available for Entra ID audit logs operations

Report on partial license assignments via the Graph SDK for PowerShell

In this article, we explore a simple PowerShell script to report on “partial” license assignments in Microsoft 365, that is licenses for which one or more “important” service plan has been toggled off. There can be various reasons for a service plan to be disabled, but since some plans have more importance than others, highlighting such scenarios allows organizations to potentially switch the users in question to a different (and cheaper) license. Or to re-evaluate whether the need for disabling the specific service plan still exists. …

Continue readingReport on partial license assignments via the Graph SDK for PowerShell