Mastering Microsoft Graph PowerShell

Microsoft Graph Overview

Microsoft Graph is a RESTful web API that offers access to data and intelligence in Microsoft 365. It provides a unified programmability model that you can use to access the tremendous amount of data in Microsoft 365, Windows, Entra ID and Intune.

• Microsoft Graph Overview
• Microsoft Graph Benefits
• Graph Explorer
• Graph X-Ray
• LAB: Working with the Graph Explorer

Microsoft Graph PowerShell

The Microsoft Graph PowerShell SDK acts as a wrapper for the Microsoft Graph APIs, exposing the entire API set for use in PowerShell. It contains a set of cmdlets that helps you manage identities, devices and Microsoft 365 services.

• Microsoft Graph PowerShell Overview
• Install Microsoft Graph PowerShell
• Microsoft Graph Permissions and Authentication
• Microsoft Graph Find Commands
• Microsoft Graph Queries
• Limitations of Microsoft Graph PowerShell
• LAB: Working with Microsoft Graph PowerShell

Microsoft Entra ID

The Graph modules for Entra ID allow you to create users and groups with PowerShell. You can assign roles to users, get insights in the sign in activity for your organization and list the devices that are registered or joined to Entra ID.

• Create and Manage Users
• Create and Manage Groups
• Create Dynamic Groups
• Assign Roles to Users and Groups
• Assign Licenses to Users and Groups
• View Sign In Events for Users
• LAB: Use Microsoft Graph PowerShell with Microsoft Entra ID

Microsoft Intune

The Graph modules for Microsoft Intune allow you to report on the devices in your organization. You can get insights in the software installed, the operating systems in use and whether devices are compliant with organizational policies.

• Device Configuration
• Compliance Policies
• App Configuration Policies
• Device Reporting
• LAB: Use Microsoft Graph PowerShell with Microsoft Intune

Microsoft 365 Services

Microsoft Graph also contains various PowerShell cmdlets to manage and retrieve data from Exchange Online, SharePoint Online and Teams. These commands allow you to generate extensive reports combining information across all Microsoft 365 products.

• Exchange Online: Manage Mailboxes, Send Email, Get Mailbox Statistics
• SharePoint Online: Manage Sites, Get Site Activity Information, List Permissions
• Teams: Create Teams and Channels, Manage Team Members, Send Chat Message
• LAB: Use Microsoft Graph PowerShell with Microsoft 365 Services

Microsoft Graph Authentication Options

Authentication to Microsoft Graph can be performed both interactively and programmatically. To run automated scripts without user interaction, you can work with an application registered in Entra ID. This allows for secure authentication, not tied to a specific user, with a controlled set of permissions.

• Create an Entra ID App Registration
• Authentication with Client Secret
• Authentication with Certificate
• Managed Identities
• Automation Account with Managed Identity
• LAB: Automate Microsoft Graph Script Execution