Microsoft is shifting more and more towards granular access control—and with that comes the need to create a custom role in Microsoft 365. While built-in roles still serve a purpose, they often lack the precision required in modern enterprise environments. That’s where custom roles step in, especially when combined with Microsoft Entra ID and the […]
Secure Your Microsoft Graph API Access: Why and How I Implement RBAC for Applications in Exchange Online
Exchange Online is continually evolving, providing more granular security controls. One crucial area I often find overlooked is securing Microsoft Graph API permissions like Mail.Send or Mail.Read. By default, applications registered in Microsoft Entra ID might have access to every mailbox within an organization. This poses significant security and compliance risks. Implementing RBAC in Exchange […]
Automate Microsoft Entra User Management with Azure Function: Deactivate Inactive Users
Introduction Managing user accounts manually in Microsoft Entra can quickly become tedious and error-prone, especially when it comes to disabling inactive users. Thankfully, you can easily automate this task by creating an Azure Function to Deactivate Inactive Users. This guide provides a beginner-friendly, step-by-step approach to automating user management in Microsoft Entra using Azure Functions […]
EWS in Exchange Online is Being Deprecated – Everything You Need to Know
1. Introduction Microsoft recently announced that Exchange Web Services (EWS) in Exchange Online will be fully deprecated by October 1, 2026. This means that all applications, scripts, and integrations relying on EWS will stop working. You can react to EWS Deprecation Exchange Online with MS Graph API! If your business still depends on EWS, it’s […]
Ultimate Guide to Setting Up Azure Communication Services for Email Sending
Introduction Azure Communication Services (ACS) provides a robust cloud-based solution for integrating messaging capabilities into applications, including email sending. This guide will walk you through the complete setup of ACS for email, from creating resources in the Azure portal to configuring domain authentication and sending emails via APIs. 📌 Important: Microsoft has introduced new Exchange […]
Microsoft Introduces New Exchange Online Tenant Outbound Email Limits
Microsoft recently announced new tenant-level outbound email limits for Exchange Online. These limits, referred to as Tenant External Recipient Rate Limits (TERRL), regulate the number of emails that a tenant can send to external recipients per day. The limits are calculated based on the number of licensed email users within the tenant. While most organizations […]
Passkeys in Entra ID: The Future of Passwordless Authentication
Introduction Passwords are insecure, difficult to manage, and often the weakest link in IT security. Microsoft is pushing forward with passwordless authentication using Passkeys in Entra ID. But what exactly are Passkeys, and how do they differ from traditional FIDO2 keys or the Microsoft Authenticator? In this article, we explore the benefits, drawbacks, and practical […]
Is Your Exchange Server Accepting Emails from Any Microsoft 365 Tenant? Improve your Exchange Hybrid inbound Mail security know!
How can you boost your Exchange Hybrid inbound mail security? In a hybrid Exchange environment, ensuring that only authorized messages reach your on-premises Exchange servers is crucial for security. If your MX record points to Office 365, you should configure your firewall to block all inbound email traffic except from Microsoft’s public IP addresses. That […]
Microsoft Entra ID Audit with PowerShell and Microsoft Graph: Detect Orphaned Apps & Secure Your Cloud
Introduction Organizations increasingly rely on Microsoft Entra ID to manage authentication and access for their cloud-based applications. However, over time, some applications become orphaned—no longer actively managed or monitored—posing potential security risks. To maintain security and compliance, IT administrators must routinely perform a Microsoft Entra ID audit with PowerShell, ensuring ownership is clearly assigned. This […]
Microsoft Copilot Agents Overview : The Ultimate Guide to Graph, CRM, Web, and Static Agents
Microsoft Copilot Agents Overview : What are Agents? Microsoft 365 Copilot is revolutionizing productivity by integrating AI-powered assistance into everyday workflows. However, many users and IT professionals don’t fully understand how Copilot retrieves and processes information. In that Blog we focus on an quick Microsoft Copilot Agents Overview! This is where Copilot Agents come in. […]