Bulk work across services.
WHAT SCRIPTING SUITS HERE
Bulk user creation and modification Licence assignment and auditing Mailbox configuration Reporting across the tenant Cleaning up after departures
WHAT REPORTING SCRIPTS TO BUILD
Licences assigned against active users Accounts without multi-factor authentication Mailboxes with forwarding configured Guest accounts and their age Groups with no owner Sites and teams that are inactive
WHY THOSE SPECIFICALLY
They are the things that quietly go wrong and nobody notices.
WHAT TO SCHEDULE
Those reports, regularly.
WHAT TO AUTOMATE CAREFULLY
Anything that removes access or deletes data.
WHAT TO REQUIRE FOR THOSE
A report first, reviewed by a person, then action.
WHAT AUTHENTICATION TO USE FOR AUTOMATION
An application identity with certificate authentication, and the narrowest permissions.
WHY NOT A USER ACCOUNT
It requires stored credentials, is subject to additional authentication, and breaks when the person leaves.
WHAT TO RESTRICT
The permissions granted to that identity, to exactly what the scripts require.
WHAT TO REVIEW
Those permissions, periodically.
