Graph-based What If Conditional Access tool

Microsoft released new Graph API based implementation of the What If tool. In this article, we will take a look at how to leverage the new What If experience in the UI as well as how the underlying Graph API endpoints work. It is great to finally have a supported method to test your Conditional Access policies! …

Continue readingGraph-based What If Conditional Access tool

Working with custom attributes via the Graph SDK for PowerShell and the Entra module

In this article, we will examine how to work with Exchange custom attributes (also known as extension attributes) via the Graph SDK for PowerShell. The examples include retrieving and modifying values for the set of extensionAttribute1-15, generating a report of all the values, bulk scenarios and more. We are also including some examples for the Entra PowerShell module, which does improve the experience a bit. Read on …

Continue readingWorking with custom attributes via the Graph SDK for PowerShell and the Entra module

Reporting on group membership for Entra ID devices (including assigned licenses)

In this article we explore the methods available to report on group membership for device objects within Entra ID. One of the scenarios where this is important is for device-based licensing for Microsoft 365 Enterprise apps. As neither the Entra ID portal nor Microsoft 365 Admin Center do a good job at that, we instead leverage the Graph API and Graph SDK for PowerShell, and provide sample scripts for both. …

Continue readingReporting on group membership for Entra ID devices (including assigned licenses)