Updating the Entra ID Custom Banned Password List with PowerShell
Microsoft 365 tenants with Entra P1 or P2 licenses can use a custom banned password list to stop people using specific terms in their passwords. The idea is to prevent easily-guessed terms being used in passwords. You could also block words deemed to be objectionable. In any case, this article explains how to maintain the custom blocked password list with a PowerShell script. https://office365itpros.com/2025/06/19/custom-banned-password-list/When the Invoke-MgGraphRequest Cmdlet Needs Help to Fetch Responses
Sometimes it’s hard to get a response back from running a Graph API request with the Invoke-MgGraphRequest cmdlet. Graph Explorer helps. So does reading Microsoft’s documentation for the cmdlet. In the end, everything works out and we can discover some valuable information that comes back in a response header. In this case, the response header helps us discover if a purge job works. All of this might sound quirky, but it could make a difference to your PowerShell scripts. https://office365itpros.com/2025/06/12/invoke-mggraphrequest-responses/
GRAPH API error: Create Upload Session: HTTP result - 409 Conflict
Has anyone encounter issues when using Instance Attributes? Particularly the property microsoft.graph.conflictBehavior with "replace" when there's a conflict? In my case, I use SAS Studio to send files from Linux to SharePoint. A SAS macro with Graph API was used to upload from Linux to SharePoint. The Graph API did not follow the provided ConflictBehavior to "replace" the existing file. It was working as of June 2nd, 2025, USA time. Not anymore on June 3rd, 2025. None of my process or files was changed. Does anyone have any insight? Thank you, JerryAvoid The Five Big Errors in Graph PowerShell Scripts
Everyone learns from experience. This article covers five important building blocks for writing great Graph PowerShell scripts, the product of hard-won experience and many mistakes. Filtering, properties, permissions, and pagination all make the list. https://practical365.com/graph-powershell-5-tips/Mailbox Import-Export Graph APIs Leave No Audit Trail
A recent post revealed that the Mailbox Import-Export Graph API doesn’t capture audit events for its operations. The API is in beta, but this is disappointing. Auditing any mailbox is important, but it becomes a critical requirement when the possibility exists that attackers could use the API to exfiltrate mailbox data outside of the tenant. This is a hole that Microsoft needs to close. https://office365itpros.com/2025/06/04/import-export-graph-api/Power Automate Flow moving Attachments in Email to MS List - can it get a Email as an attachment?
Created a Flow to get Emails from Outlook using Graph API to extract all metadata into columns in a MS List including attachments of the Email into a column in the MS List with the name as a hyperlink in the same site as the list; but when there is another Email as an attachment it does not come into the MS List. Is there such a limitation in MS Flow where it cannot get the Email attached in an Email as an Attachment?Practical Graph: Working with Calendar Events Using Graph APIs
Calendar events make up user and group calendars. It's possible to create, update, cancel, and remove calendar appointments and meetings, including recurring events, through the Graph API. This article explains how to pass all the properties needed to create and manage events using PowerShell and the Graph APIs. https://practical365.com/calendar-events-graph-api/How to List Hidden Group Memberships with the Graph
A user reported that a script didn’t list any details of hidden group memberships and asked why. The reason is that a separate Graph permission controls access to hidden group memberships. If an app doesn’t have the permission, the Graph returns null memberships, which is probably not all that helpful. Once the right permission is in place, everything works. https://office365itpros.com/2025/05/29/hidden-group-memberships/
Allow addition of members to mail-enabled security groups via Graph API
Previously one could add members to mail-enabled security groups via Graph API. But turns out that was a bug, and it was fixed some weeks ago removing this functionality. Would it be possible to allow add-remove of members in mail-enabled security groups via Graph API?
