Microsoft Graph
10 articles tagged Microsoft Graph.
Build RAG Over SharePoint Documents Without Breaking Permissions
Ground an internal AI assistant on SharePoint files so each user only gets answers from documents they can open, using the Copilot Retrieval API or Azure AI Search with ACL ingestion.
EWS retirement in Exchange Online: find EWS apps and set EWSAllowedAppIDs
Find every app that still calls Exchange Web Services, build an EWSAllowedAppIDs allow list and set EWSEnabled so critical apps keep working while EWS is switched off from October 2026.
Fix Microsoft Graph 429 throttling with Retry-After, batching and delta
Stop 429 Too Many Requests errors from Microsoft Graph: honour Retry-After, tune the SDK retry handler, batch correctly, cut request cost and replace polling with delta queries.
Microsoft Graph webhooks: validate, renew and recover missed notifications
Build a Microsoft Graph change notification endpoint that passes validation, renews subscriptions on time, handles lifecycle events and resyncs missed changes with delta query.
Migrate EWS apps to Microsoft Graph before Exchange Online turns off EWS
Move mail, calendar and contact integrations from EWS to Microsoft Graph: map operations, replace impersonation with scoped permissions, convert stored IDs and plan for gaps.
Multi-tenant SaaS on Entra ID: admin consent, tenant allowlist, app lock
Register a multi-tenant SaaS app in Microsoft Entra ID, onboard customer tenants through admin consent, enforce a tenant allowlist in token validation and lock service principal credentials with app instance property lock.
Scope Graph Mail.Send to specific mailboxes with RBAC for Applications
Limit an app's Microsoft Graph Mail.Send permission to the mailboxes it really needs with RBAC for Applications in Exchange Online, then remove the tenant-wide grant in Entra ID.
Set Up Copilot Connectors to Index External Data with Correct Permissions
Configure Microsoft 365 Copilot connectors in the admin center so external and on-premises content reaches Copilot and Microsoft Search with source ACLs, identity mapping and a staged rollout.
Stop illicit consent grants with user consent settings and admin approval
Restrict which apps users can consent to in Microsoft Entra ID, route everything else through the admin consent workflow, and find and revoke risky OAuth grants that already exist.
Troubleshoot Conditional Access with the What If tool and sign-in logs
Find out why a Conditional Access policy did or did not apply to a sign-in by reading the sign-in log, simulating it with What If, and querying results at scale.