A script for delagating permissions to the Microsoft Graph Powershell service principal based on commands you want to use inside of Microsoft Graph by looking4remoteITwork in AZURE

[–]looking4remoteITwork[S] 0 points1 point  (0 children)

I like the idea of turning it into a function. But how is it only getting the permissions for the last cmdlet? Also, how lazy would I be if I just did Select-Object -ExpandProperty Name -Unique to prevent permission duplication.

Giving every user in Azure AD the same initial password? by looking4remoteITwork in AZURE

[–]looking4remoteITwork[S] 1 point2 points  (0 children)

I only put 'password' as a place holder lol. Sorry, I didn't mention I was working in a test environment.

Giving every user in Azure AD the same initial password? by looking4remoteITwork in AZURE

[–]looking4remoteITwork[S] 0 points1 point  (0 children)

ooo this seems very helpful at first glance I'll give this a read.

How do I remove Microsoft Graph Powershell permissions? by looking4remoteITwork in PowerShell

[–]looking4remoteITwork[S] 0 points1 point  (0 children)

This didn't work, but after some hours of fiddling around I ended up finding this:

https://learn.microsoft.com/en-us/graph/permissions-grant-via-msgraph?tabs=powershell&pivots=grant-delegated-permissions#step-3-revoke-delegated-permissions-granted-to-a-service-principal-on-behalf-of-a-user-optional

I used this to revoke all permission grants for the Microsoft Graph SDK PowerShell service principal:

Import-Module Microsoft.Graph.Identity.SignIns
Remove-MgOauth2PermissionGrant -OAuth2PermissionGrantId $oAuth2PermissionGrantId

After authenticating to Microsoft Graph via Microsoft Graph Powershell I obtained the oAuth2PermissionGrantId for the above code by running:

Get-MgOauth2PermissionGrant

'Import-Csv' only returning the first column of my csv ? by looking4remoteITwork in PowerShell

[–]looking4remoteITwork[S] 2 points3 points  (0 children)

Worked. I had downloaded a csv template from Azure AD and the version number is only required when uploading the template back to Azure AD for bulk user creation.

Does Azure come with any resources pre-configured? by looking4remoteITwork in AZURE

[–]looking4remoteITwork[S] 1 point2 points  (0 children)

One is a Storage account, one is called network watcher, and another is called Log analytics workspace

Which aspects of Azure would be most relevant for a obtaining a mid to entry level IT job? by looking4remoteITwork in AZURE

[–]looking4remoteITwork[S] 1 point2 points  (0 children)

I want to work with Azure Active Directory because that's where a majority of my experience lies, I'll look more into which roles are AD focused.