Category: PowerShell

Cat Links Azure AD, Entra ID, Exchange Online, Graph API, Microsoft 365, Office 365, PowerShell

Remove user from all Microsoft 365 groups and roles (and more) via the Graph API (non-interactive)

Posted on Vasil Michev

A PowerShell script to remove user, or a set of users, from all groups they are a member of by using the Graph API methods. You can leverage the additional parameters of the script in order to also remove any directory role assignments, ownership assignments and delegate permission grants. The script supports Microsoft 365 Groups, Entra Security Groups, Exchange Distribution Groups and Mail-Enabled security groups. …

Continue readingRemove user from all Microsoft 365 groups and roles (and more) via the Graph API (non-interactive)

Cat Links Graph API, Exchange Online, Microsoft 365, Office 365, PowerShell

How to manage email addresses for Microsoft 365 Groups

Posted on Vasil Michev

I set to test claims that the email address(es) of a Microsoft 365 Groups can be managed via the Graph API. The results prove that this is not the case, and instead one should use the methods exposed by the Exchange Online admin tools and APIs. Concrete examples are provided in the article. …

Continue readingHow to manage email addresses for Microsoft 365 Groups

Cat Links Azure AD, Entra ID, Microsoft 365, Office 365, PowerShell

Reporting on Entra ID directory role assignments (including PIM)

Posted on Vasil Michev

Report on permanently assigned Entra ID directory roles as well as any PIM-eligible role assignments. The scripts come in two versions, one based on the Graph SDK for PowerShell and another one using “raw” Graph API requests. Supports Privileged Access Groups as well (PIM for groups). …

Continue readingReporting on Entra ID directory role assignments (including PIM)

Cat Links Entra ID, Azure AD, Graph API, Microsoft 365, PowerShell

Reporting on BitLocker recovery keys and associated devices

Posted on Vasil Michev

Due to popular demand, I put together a short script that generates a report of all BitLocker recovery keys in your tenant. Optionally, you can use the report to include device-level details, such as its compliance status, last activity or registered owner. …

Continue readingReporting on BitLocker recovery keys and associated devices