MS GRAPH

Configure Entra External Collaboration Settings with Microsoft Graph

Configure Entra External Collaboration Settings with Microsoft Graph

Hi All,

Recently I had the Task to set up Entra External collaboration settings with PowerShell.

According to the Microsoft Documentation you should use the AzureAD PowerShell Module

The retirement of the MSOnline (MSOL) and AzureAD PowerShell Modules has been postphoned many times. The modules will not be supported after March 30 2025. It would certainly work, but that would be only a short time solution.

Runbook to check Entra Apps with expiring ClientSecrets and Certificates

Runbook to check Entra Apps with expiring ClientSecrets and Certificates

Hi All,

In the previous Article I’ve explained how to check for Entra Apps with expiring ClientSecrets and Certificates.

In this Blog Article i explain how we can extend this into a Azure Automation Runbook.

Automation Account

The Azure Automation Account needs to have a Managed Identity

Use the AZ PowerShell to get Infos about the Azure Automation Account

###############################################################################
# Get Managed Identity of Azure Automation Account
###############################################################################
Connect-AzAccount -Tenant icewolfch.onmicrosoft.com
Get-AzAutomationAccount -Name icewolfautomation -ResourceGroupName RG_DEV

#Get ManagedIdentity
$AutomationAccount = Get-AzAutomationAccount -Name icewolfautomation -ResourceGroupName RG_DEV
$AutomationAccount.Identity

PowerShell Script to check Entra Apps with expiring ClientSecrets and Certificates

PowerShell Script to check Entra Apps with expiring ClientSecrets and Certificates

Hi All,

A few years ago, i did write a Script to warn Entra Application Owners about expiring ClientSecrets and Certificates.

The Script has been using the AzureAD PowerShell Module. Time to renew it to Microsoft.Graph

Entra App Registrations

Here is the Code to get the Entra App Registration with Microsoft.Graph PowerShell

#Connect to Microsoft.Graph
Connect-MgGraph -Scopes Application.Read.All -NoWelcome

Microsoft.Graph PowerShell Modules 2.25.0 released

Microsoft.Graph PowerShell Modules 2.25.0 released

Hi All,

A few Hors ago, Microsoft has released the Version 2.25.0 of Microsoft.Graph and Microsoft.Graph.Beta Modules.

Release Notes

  • Adds Beta Cmdlets for paths under the directory.publicKeyInfrastructureRoot tag
  • [v2] Examples Update
  • Updates wrong Connect-MgBetaGraph to Connect-MgGraph
  • Handles + character in supported equality and function operators in filter expressions
  • Update CONTRIBUTING.md - fixing link by @mmascolino

I am using the new PSResourceGet here instead of the PowerShellGet commands.

Group Based Licensing with M365 Admin Center and Graph

Group Based Licensing with M365 Admin Center and Graph

Hi All,

I have two Groups that are used to assign M365 Licenses to Users.

Recently there was a change to move the Management from the Entra Admin Center to the M365 Admin Center

Entra Admin Center

In the Entra Admin Center you still can find the Groups

If you select the Group and click on “Licenses” you can see the Warning Message that informs you that the Management of the Licenses has now moved to M365 Admin Center.

Register FIDO2 Passkey in Entra ID on behalf of users with PowerShell

Register FIDO2 Passkey in Entra ID on behalf of users with PowerShell

Hi All,

Recently i was working together with one of my fellows (shout out to Raul Ruta) to figure out how Register Passkeys with the new Microsoft Graph Beta API’s.

The only thing we found was the Article of Jan Bakker, that uses the Yubico Sample scripts based on Phyton.

I was looking if there is a better way that does not require Phyton and found this PowerShell Module

Microsoft.Graph PowerShell Modules 2.24.0 released

Microsoft.Graph PowerShell Modules 2.24.0 released

Hi All,

A few Hors ago, Microsoft has released the Version 2.24.0 of Microsoft.Graph and Microsoft.Graph.Beta Modules.

Release Notes

  • [v2] Weekly OpenApI Docs Refresh
  • [v2] Examples Update
  • Corrected example 5 title by @msewaweru
  • Adds AutoRest directives to remove over generated cmdlets
  • Fixes subsequent failures after first successful Invoke-MgGraphRequest run when using national cloud environments
  • Updated example to remove mentions of Global admin by @msewaweru

SharePoint Online Azure ACS Retirement

SharePoint Online Azure ACS Retirement

Hi All,

A few Years ago i wrote an Article on how to Grant Access to a Entra App in Sharepoint to upload Files to a SharePoint Site with PnP.PowerShell

I wanted to do the same thing and there is a big red bar on top, that informs about the Azure ACS Retirement in April 2026.

Starting April 2, 2026, Azure Access Control service (ACS) usage will be retired for SharePoint in Microsoft 365 and users will no longer be able to create or use Azure ACS principals to access SharePoint. Learn more about the Access Control retirement

Microsoft.Graph PowerShell Modules 2.23.0 released

Microsoft.Graph PowerShell Modules 2.23.0 released

Hi All,

A few Hors ago, Microsoft has released the Version 2.23.0 of Microsoft.Graph and Microsoft.Graph.Beta Modules.

Release Notes

  • [v2] Weekly OpenApiDocs Refresh
  • Bump autorest submodule
  • [v2] Examples Update
  • Migration to ESRP V5

I am using the new PSResourceGet here instead of the PowerShellGet commands.

I’ve changed the Scope from “AllUsers” to “CurrentUser” in this Article - with that you don’t need to Run PowerShell as Administrator anymore.