I guess #microsoft layoffs affected the people maintaining the status pages, because the #microsoftgraph was timing out af yesterday, but status says it‘s all green.

Are you still using client ID & secret in your automation Runbooks! Learn how to set up managed identities in Azure Automation Runbooks and use them in PnP.PowerShell scripts.
You can also debug your scripts in Visual Studio Code.
#AzureAutomation #PowerShell #Security #MicrosoftGraph #PnP
https://www.menzel.it/post/2025/03/managed-identity-azure-automation-pnp.powershell/

Microsoft Graph PowerShell SDK V2.26.1 Remains Flawed http://dlvr.it/TJPpwK via PlanetPowerShell #MicrosoftGraph #PowerShell #SDK #TechNews

Is 'Get Manager (V2)’ failing you again? If a user has no manager, your flows crash! Time to switch to a new boss– Microsoft Graph API! The smarter, stress-free way to find your managers! #PowerPlatform #Power Automate #MicrosoftGraph #Automation #Microsoft365 #EntraID

http://elliskarim.com/2025/02/09/fire-get-manager-v2-in-power-automate-graph-api-is-the-new-boss/

Some Graph API fun today.

The Graph API knows `applications` (https://learn.microsoft.com/en-us/graph/api/resources/application) and `servicePrincipals` (https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal).

The Azure Portal knows `App Registrations` and `Enterprise Applications`.

App Registrations (Portal) = applications (Graph API)
Enterprise Applications (Portal) = servicePrincipals (Graph API)

Applications (App Registrations) and servicePrincipals (Enterprise Applications) have a unique, individual `ObjectId` but the ones that belong together hold the same `ApplicationId` which glues them together.

Fortunately, the Graph API documentation is clear and relatively consistent on what is expected for requesting an object - either the `objectId` or the `applicationId`:

```
GET /servicePrincipals/{id}
GET /servicePrincipals(appId='{appId}')
GET /applications/{applicationObjectId}
GET /applications(appId='{appId}')
```

When searching for servicePrincipals (Enterprise Applications) in the portal, it is not that clear since the terms are mixed up a bit.

Setting up an integration to update user birthdays, but found out I also need the Sites.ReadWrite.All scope in addition to User.ReadWrite.All or Directory.ReadWrite.All. Error messages mention access denied related to "office." Is this an intended requirement or a legacy issue? #MicrosoftGraph #APIs

#MicrosoftGraph #PowerShell How to bypass Microsoft Graph PowerShell access restrictions http://dlvr.it/TFpc0P via PlanetPowerShell

I created a PowerShell script that uses Microsoft Graph to move emails around in Outlook for me.

https://thedxt.ca/2024/09/outlook-email-mover/

Tell me you are developing a calendar app without telling me you are developing a calendar app.

In May 2024, Kaspersky's Global Research and Analysis Team (GReAT) uncovered a new advanced persistent threat (APT) group named CloudSorcerer. This sophisticated group has been actively targeting Russian government entities, leveraging cloud services such as Microsoft Graph, Yandex Cloud, and Dropbox for command-and-control (C2) and data exfiltration. CloudSorcerer's techniques echo the CloudWizard APT from 2023, utilizing GitHub and Mail.ru for initial communications and using encoded strings to interact with cloud services.

The malware used by CloudSorcerer is particularly notable for its ability to dynamically adapt its behaviour based on the process it runs in, highlighting its sophistication. The malware collects system information, manipulates files, executes shell commands, and creates processes using COM interfaces. These capabilities, combined with its use of cloud infrastructure for C2, underline the advanced nature of this cyber espionage toolset. Although there are similarities to CloudWizard, the distinct differences in code and functionality suggest that CloudSorcerer is a unique actor employing similar techniques but developing its tools.

Are you excited for #MSBuild? Then you might be interested in my app miniLook! it is a Windows app which tries to make checking your email faster and take less RAM!

https://www.microsoft.com/store/productId/9NWQNMP3XSDK?ocid=mastodon

The last part of my series about building a Blazor applicaton to manage custom Viva Learning providers with the Microsoft Graph is out! In today's post, we cover how to assign a course to a user https://www.developerscantina.com/p/viva-learning-blazor-app-part-3/ #viva #microsoft365 #MicrosoftGraph

#MicrosoftGraph has recently deployed support for #http2 .
In this blog post I share a retrospective on how we made this happen for such a large #API

https://baywet.github.io/microsoft-graph-http2/

Also this morning, I was able to finally update a #Microsoft365 licensing #Powershell script that we've used for user provisioning for years. I updated from the now-deprecated #MSOnline module to use the newer #MicrosoftGraph modules.

I have been banging my head against it for a while now and finally had breakthroughs in understanding that allowed it to click in my brain and get it working.

I still need to monitor it for a couple of weeks, but I think we're through the hard part.

Microsoft has deprecated Set-MsolUserLicense here's how to how to change 365 licenses with MS Graph and PowerShell.

#M365 #O365 #Microsoft #MSGraph #PowerShell #MicrosoftGraph

https://thedxt.ca/2023/11/swap-365-licenses-with-ms-graph/

I'm extremely excited about the possibilities #Microsoft365 #Copilot will provide, especially the extensibility via plugins and #MicrosoftGraph And then there is #Copilot #Studio ! See the #MSIgnite session here: https://ignite.microsoft.com/en-US/sessions/a630f4eb-a148-43cd-8a36-38dec7ed7098?source=sessions

𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗚𝗿𝗮𝗽𝗵 𝗔𝗰𝘁𝗶𝘃𝗶𝘁𝘆 𝗟𝗼𝗴 𝗶𝘀 𝗡𝗼𝘄 𝗔𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲 𝗶𝗻 𝗣𝘂𝗯𝗹𝗶𝗰 𝗣𝗿𝗲𝘃𝗶𝗲𝘄

With Microsoft Graph Activity Logs, you can now investigate the complete picture of activity in your tenant – from token request in SignIn logs, to API request activity (reads, writes, and deletes) in Microsoft Graph Activity Logs, to ultimate resource changes in Audit logs.

https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/microsoft-graph-activity-log-is-now-available-in-public-preview/ba-p/3848269

Another fun day with #MicrosoftGraph trying to find allowed collaboration domains. Docs says to use azuread preview powershell module. Module doesn't work in powershell 7. Import module in powershell 5 and receive a banner directing me to use graph. It did provide the info in the end but it's just such a complete mess

Blogged: Issue Employee verifiable credentials using Entra Verified ID and ASP.NET Core

https://damienbod.com/2023/07/03/issue-employee-verifiable-credentials-using-entra-verified-id-and-asp-net-core/

Blogged: Reset passwords in ASP.NET Core using delegated permissions and Microsoft Graph

https://damienbod.com/2023/06/19/reset-passwords-in-asp-net-core-using-delegated-permissions-and-microsoft-graph/