Microsoft Graph’s groupAnalytics API (currently in preview) provides detailed insights into Microsoft Entra ID groups, eliminating the need for complex custom scripts to get member counts, owner counts, expiration status, and more. This blog explores the groupAnalytics API and demonstrates how to use it for better management of Entra ID groups.
Microsoft is ending the preview of the memberOf rule operator on November 3, 2026. After this change, dynamic groups, dynamic administrative units, and entitlement management auto-assignment policies using memberOf rules will stop updating their memberships. This blog includes a PowerShell script to quickly identify affected configurations and helps admins plan their migration to supported dynamic membership rules.
Microsoft Purview now supports time-limited role group assignments for both new and existing members. Admins can set an expiration date from 1 day to 2 years. Once the date is reached, Purview automatically removes the role group assignment. This blog explains how to configure expiration for Purview role groups and the key limitations to know.
If Microsoft Entra Connect Sync is still running solely for device synchronization, you're maintaining infrastructure you may no longer need. This guide shows you how to configure Device Sync in Microsoft Entra Cloud Sync using the Microsoft Entra admin center and Microsoft Graph to synchronize Active Directory computer objects without relying on Microsoft Entra Connect Sync.
Microsoft has officially announced that passkeys will become the default authentication method in Microsoft Entra, replacing Microsoft-provided SMS and voice authentication. The change begins rolling out on September 1, 2026, with the transition completing on February 1, 2027.
Microsoft is adding two new PowerShell settings that let admins control who can join federated group chats in Microsoft Teams. These settings are disabled by default and will roll out globally between late July and late September 2026.
Struggling to automate secure monitor manage M365?
Try AdminDroid for Free!Get Microsoft 365 Security tips & best practices
Detect and block high-risk agents automatically using Identity Protection and Conditional Access for Agents based on real-time risk signals.
8 min read
Learn how to create manual incidents and alerts in Microsoft Defender and investigate user reported threats beyond automated detections.
6 min read
Use custom account correlation rules in Microsoft Defender to link related identities and improve threat detection.
10 min read
Discover why attackers target workload identities and how to detect, remediate, and secure them in Microsoft Entra ID.
13 min read
Microsoft will require registered authentication methods for SSPR verification. Find unregistered users amd prepare for enforcement.
4 min read
Learn how to securely configure the My Staff portal in Microsoft Entra ID using PIM and Conditional Access to protect delegated admin access.
9 min read
Create a SharePoint site ownership policy to detect ownerless sites, notify users to assign owners, and enforce read-only or archive actions.
11 min read
Detect Storm-2949 attacks in Microsoft 365 using AdminDroid. Identify and act early before it escalates into a cloud breach
8 min read
Learn how to control unmanaged device access in SharePoint Online to protect data by limiting or blocking access from non-compliant devices at tenant and site level.
11 min read
Explore default user permissions in Microsoft 365 and learn how to manage these built-in settings that are enabled by default.
13 min read
Discover how the Shadow AI page in Microsoft 365 helps you identify, monitor, and block unauthorized AI tools to reduce risk and secure usage.
4 min read
Discover the top Microsoft 365 security settings you should disable to reduce risks, prevent data exposure, and strengthen tenant security.
16 min read