Scoping Azure AD Roles with Administrative Units
In Azure AD, an Administrative Unit is a collection of Users, Groups and Devices. These groupings provide a means to apply granular control in the assignment...
Posts by Year
2023
Granting Background App Services, Daemons and Scripts Delegated Permissions for Microsoft Graph
Background services, daemons and scripts interacting with Microsoft Graph are commonly configured to acquire Application level permissions. Application admin...
B2C Federating to a Single Azure AD Tenant
A B2C tenant that federates back to single Azure AD tenant supporting Members, Guests (B2B) and Customers (or Consumers).
2022
Azure AD Group Writeback to On-Premises AD
Using the Azure AD Connect Group Writeback feature to synchronise cloud groups to on-premises.
Azure AD On-Premises Application Identity Provisioning
Azure AD Application Identity Provisioning to On-Premise Applications that lack SCIM support.
Using PowerShell to Create HTML Emails
Using PS and the .Net MailMessage class to create rich content html emails with embedded images and attachments for services like AWS SES and SendGrid.
Preconfiguring Authentication Methods for SSPR
Empower newly onboarded users to utilise SSPR without needing to contact the IT Service Desk to set their first password.
Calling Microsoft Graph via PowerShell
Microsoft Graph using the Invoke-RestMethod
2021
Azure AD Tenant Migration and Consolidation
A series of high-level steps for migrating an Azure AD O365 tenant with its users and data.
Analysing Application and Service Principal Objects
Analysing Application and Service Principal objects.
Using MSAL.NET with PowerShell
Example use of the PowerShell MSAL module.
Understanding the Azure AD Guest User Lifecycle
Azure B2B (Guest) users; their means of entering the tenant and their lifecycle attributes.
AD FS Authentication with Azure AD
A means of enabling and disabling AD FS federation on an Azure AD custom domain name.
Setting Mailbox Localisation in O365
A method to set mailbox regional configuration.
Increasing the O365 Email Size Limit
A method to increase the maximum receive sizelimit on a specific mailbox
AAD Connect and the ImmutableId
How AAD Connect and the ImmutableID attribute are related.
PlanId and SkuId Friendly Names
A collection of PlanIds and SkuIds with their respective friendly names as shown in the Azure Portal.
Generating Random Passwords
Creating a random password string using only PowerShell and .NET.
Microsoft Graph Audit Log Filters
A series of useful audit filters that may be used against the Microsoft Graph auditLogs endpoint.