GeldHades27355

Pragmatic approaches to MFA or alternatives?

5

Hey folks, apologies if this is (another) noob question. We get that MFA isn't supported by M365DSC. Naturally, anything requiring human action to authenticate would be disruptive in any automation...

AADUser: Phone numbers missing?

1

### Description of the issue I can't seem to find any user phone numbers in exports, although phone number seems supported/documented. This applies to mobile, fax and phone. Other contact...

### Description of the issue The documentation on [https://microsoft365dsc.com/user-guide/get-started/authentication-and-permissions/](url) suggests using `Get-M365DSCCompiledPermissionList -ResourceNameList @('AADUser', 'AADApplication') -PermissionsType 'Application'` However, I get this error: `A parameter cannot be found that matches parameter...

MSP asking for getting started advice: Anyone willing to spend some time 1:1? (PAID, if it helps!)

5

We're starting an MSP business, focused on small businesses in the EU. Our clients/tenants have 3-5 users on average. You can imagine we'll have a few hundred tenants eventually. M365DSC...

An incredible number of tests fail, despite actual values matching recommended/expected values - "Access token is empty"?

13

81% of tests fail on our tenant. That is ... impossible. Checking the plain test results, I got this most of the time: { "error": { "code": "InvalidAuthenticationToken", "message": "Access...

Align warnings with available licenses. Report unlicensed features as "unlicensed" (in grey).

1

For example: M365 BP doesn't include EID P2, so there is no advanced user risk management. But all tests for risk management still fail, bringing the score down. (Secure Score...

PS: import-module microsoft.graph takes FOREVER

2

Recently, my devices need between 10-20 minutes to import microsoft.graph. While they aren't supercomputers, they're no slouches either. One of them is a Surface Pro 9 SQ3 (Arm64) and the...

QUESTION / DOCUMENTATION: Is "Organization.Read.All" really enough for "Update" access to [TeamsUpgradePolicy]?

9

Folks, we're looking at https://microsoft365dsc.com/resources/teams/TeamsUpgradePolicy/ and related Teams resources. in there, it says: Application permissions Read - Organization.Read.All Update - Organization.Read.All Does that make sense? Shouldnt Update need Organization.ReadWrite.All permissions?...

HELP: how to deploy sensitivity labels with [SCSensitivityLabel] - specifically how to get "update" access?

2

Hey folks, We're trying to deploy sensitivity labels. It seems the export was successful. Here is one of them: ```PowerShell SCSensitivityLabel "SCSensitivityLabel-General" { AdvancedSettings = @( MSFT_SCLabelSetting { Key =...

BUG?: [SPOSharingSettings] Settings appear to apply, except for RequireAcceptingAccountMatchInvitedAccount = $True

16

### Description of the issue Apologies if this is a noob question, but we're only starting out so I might not be asking the right questions in the right places....