As I am implementing many Conditional Access Policies and scope them to specific roles, I want to know which admins will be effected, in advance. But I am too lazy to go through all roles by hand, so I wrote following script: Nothing too fancy, but re-usable. But be aware: Roles “eligable” via PIM “eligable” Read more about AzureAD / M365 – View all active role assignments[…]
A little bit shorter this time…. If you retrieved to many AccessTokens geholt and are trying to make a REST Call, this might happen: Invoke-RestMethod : {“error”:{“code”:”InvalidAuthenticationTokenTenant”,”message”:”The access token is from the wrong issuer You’ve got too many tokens, and PowerShell doesn’t know which one to use. Which we can see like this: The easiest Read more about Invoke-RestMethod : {“error”:{“code”:”InvalidAuthenticationTokenTenant”,”message”:”The access token is from the wrong issuer[…]
If you are using Group Based Licensing to create a bundle which excludes Exchange…There’s a new plan –> Microsoft Bookings. But it depends on Exchange Online. Microsoft was so kind and activated this license within your Group Based Licensing, which causes errors… Better check your customer’s setup!
What a start! On November 27th 2019 it was finally time: The group “Azure Meetup Mannheim” had its first event outside the Bootcamp-events. And it was a blast. (https://www.meetup.com/de-DE/Azure-Meetup-Mannheim/) Here are the facts: 1st Meetup 50 Guests 2 Speaker 90 Minutes presentations 29 Pizzas 2 Crates of beer Douzends of giveaways One community If you Read more about 1st Azure Meetup – Mannheim[…]
Today it’s all about the money… oh well, about saving money.Out of the box, Azure gives us the possibility to shutdown VMs at certain times. There is even option to switch them on at certain times, using Automation Accounts. But either per ResourceGroup or for the complete subscription. I needed more dynamic in terms of Read more about Automatically start and stop Azure VMs[…]
Every year again… comes a new SSL-certificate and want to be replaced. Since doing so within the Azure Portal is quite a tedious task, here’s a script that gets the work done quite easily and fast. Simply adjust the constants in the script’s header, and you’re all set.
Zur Faschingszeit, so muss es sein, gibt es von mir ‘nen schönen Reim. Über uns’ren Beruf, was sonst? dort wo auch du dein Geld bekommst… Doch arbeitest du nur halb so hart, wie’s der IT Admin vermag. Jetzt guck’ nicht so, denn es ist wahr, Nicht körperlich, auch das ist klar. Doch nervlich ist es Read more about Faschingsgedicht: Gedenke dem Admin[…]
So, you need to be able to provide an MFA Reset method to you colleagues (service desk, etc.), but don’t fancy buying a Azure AD P2 (or E5) license to provide PIM? And of course you don’t want 20 colleagues to be global administrator… but doing it yourself everytime is somewhat useless? Here’s your way Read more about MFA Reset without Global Administrator rights.[…]
Since serveral international colleagues apporached me, asking for the blog to be available in English as well, I decided to grant their wishes. From now on, all posts will be published in English as well as in German. I will also translate all posts that have already been published.
Noch ein Module das der moderne Microsoft Admin braucht: AzureAD Shell als Admin öffnen: Find-Module AzureAD | Install-Module Connect-AzureAD Und auch hier wird MFA unterstützt. Eine Liste aller Befehle bekommt man z.B. mit: Get-Command *AzureAD*