Topic
A HaloPSA self-service form, one webhook, and a Power Automate flow per tenant turn user onboarding into a hands-off process. Here is the full build, including the ROI math.
Microsoft Forms plus Power Automate can create the user, license them, set their manager, mirror group access, and send the welcome email. No third-party tools, one tenant at a time.
Geo-blocking Conditional Access creates a ticket every time a user travels. This Forms plus Power Automate build grants time-boxed access to approved countries, then revokes it automatically.
App secrets and refresh tokens hardcoded in scripts are a breach waiting to happen. Two scripts to load Secure Application Model secrets into Azure Key Vault and pull them at runtime for headless automation.
The unified Planner app replaces Tasks in Teams, Azure Information Protection Plan 1 ends sale, Intune adds macOS setup and Autopilot controls, and Copilot reaches SharePoint, OneDrive, and mobile.
When you widen an app registration's Graph permissions under GDAP, every customer relationship needs the matching role. Here is the architecture and script that updates them all at once.
Build an Entra ID app registration, mint a refresh token, and call any Microsoft Graph API from a script with no human at the keyboard. Every step, every screenshot, two reusable scripts.
Scheduling a single meeting by email eats 8 to 10 minutes. Microsoft 365 includes two free fixes: Bookings with Me for one-on-ones and Scheduling Polls for groups.
GDAP removes the pre-consent that delegated vendor integrations rely on. Here is the split of work: the prerequisites the MSP configures and the consent workflow the vendor has to build.
GDAP removes the pre-consent that made partner app registrations just work. Here is the full repair path: service account, app registration, GDAP roles, and the consent API, with scripts.
Manual app packaging means downloading installers, building IntuneWin files, and redoing it all per update and per tenant. Here are the package managers, Intune features, and tools that end the loop.
Desired state configuration turns M365 baselines from physical checklists into monitored, enforceable standards. We review Microsoft 365 DSC and take an honest look at Simeon Cloud's friendlier take.
