v1.6.0

Adds right-click menus throughout, and makes the app sturdier: large CSV imports no longer freeze
it, problems in background tasks no longer leave it stuck, and saved files can no longer be cut off.

Added

• Right-click menus throughout, offering the same actions as the keyboard, with their shortcuts:
  on a node in the console tree (including Expand and Collapse), on an object in the results
  list, on empty space in the results list (the node's actions and Filter), and on a properties
  tab (add, remove, edit, the tab's other buttons and Refresh).

Changed

• Shift+F10 now shows the same menu as right-clicking wherever the focus is. In the console
  tree it offers the node's actions, where before it offered nothing.
• Clicking the text in any column of the results list or a properties table now selects the row.
• On a Mac, menus and Keyboard shortcuts show ⌘N and ⌘⌫ for adding and removing, rather than
  Insert and Delete keys that Mac keyboards don't have.
• The log is kept at the info level for new installs, so it no longer records the path of every
  request, which can name users, unless you set level = debug. Existing settings are kept.
• On macOS and Linux, only you can read the log, as with the saved sign-in.
• Remote Servers › Refresh checks four servers at a time, rather than connecting to every
  server at once. Each check's 4-minute limit starts when its turn comes.

Fixed

• The log starts afresh when it reaches 5 MB while the app is running, rather than only at the
  next start, so a long session can no longer make it grow without limit.
• Importing a large CSV file no longer freezes the app: a file of 50,000 rows took minutes to
  read, and now takes a moment.
• A problem inside the app during a background task is now reported as an error, rather than
  leaving the spinner running for ever, a list that can't be reloaded, or an import or wizard
  that can't be closed. A workflow step it happens in is reported as failed, and the rest of
  the workflow carries on as it would after any failure.
• Settings, Remote Servers and the saved sign-in are saved whole or not at all, so a crash or
  power cut while saving can no longer leave a cut-off file behind.
• New User, Import users and Onboard user now check user names and passwords the same way,
  against what Microsoft Entra ID accepts: the user name's characters, and a password of 8 to
  256 characters with three of upper case, lower case, digits and symbols. New User and Import
  users only checked the length before, so Microsoft refused some users only once they were
  sent. Reset password checks the length in characters rather than bytes, so a password of
  four accented letters is no longer taken for eight characters.
• If the app can't set up its connection to Microsoft (for example, when the system's security
  settings can't be loaded), it says so rather than closing.

Internal

• Tests and Clippy now run on every push and pull request, on Windows, macOS and Linux.
• Errors from Microsoft Graph and Exchange Online are told apart by their status, code and
  exception type rather than by searching the message shown, so "not found", "already a
  member", "not allowed" and "needs a premium licence" are recognised however the message is
  worded.
• The results list's filter, sort and selection are kept in a part of their own, with tests,
  and the CSV and MariaDB exports build their table the same way.
• Shared code replaces copies: one device code sign-in for signing in and for approving
  permissions, one way of following pages of results for Graph and Exchange Online (which no
  longer copies every object it reads), and one search for the user, group and device pickers.
• The English text of the interface is in src/i18n/english.rs, apart from the code that
  translates it.

VirusTotal scans

Download	SHA-256	Report
stormcloud-1.6.0-amd64.deb (Ubuntu)	1822e1db3e48a259d88b5e7911f75b39fe1bcca74f910920de3e0233bf7de0cc	View scan
stormcloud-1.6.0-macos-aarch64.pkg (Apple Silicon)	67942714b4cdb69ea21476e7f19b421dc68a33ade8a3dd83c21b1859c2975ce5	View scan
stormcloud-1.6.0-windows-arm64.msi (Windows on Arm installer)	1b0217a1f129f9d155c0bb5b3cdb783079ae9e3aba43b2fdbb92bb6b3a2debd6	View scan
stormcloud-1.6.0-windows-x86_64.msi (Windows installer)	a9f05181bd56e61e2d4f2c0520b310842943f9efb759196cf66b08ce4c6ec0d1	View scan

v1.5.0

Adds keeping watch over Linux servers over SSH, and an installer for Windows on Arm.

Added

• Remote Servers: a new node below Exchange Online lists Linux servers you keep watch over by
  SSH, signing in with a password or an SSH key. For each server it shows the operating system
  and kernel, installed applications, running services, pending and security updates, and whether
  a restart is needed. Passwords and passphrases are asked for once a session and never saved,
  and host keys are checked against ~/.ssh/known_hosts or confirmed the first time.
• The Windows release now includes an installer for Windows on Arm (arm64).

Changed

• Applications no longer lists this app's own registration or Microsoft's command-line tools
  (Microsoft Graph Command Line Tools, Exchange Online PowerShell, Azure CLI and Azure
  PowerShell). Tick View › Show admin tools in Applications to see them.

VirusTotal scans

Download	SHA-256	Report
stormcloud-1.5.0-amd64.deb (Ubuntu)	f4e30e04a8703e42f63b583eda681522a12000c99bc27fe7faefbf37d0af0107	View scan
stormcloud-1.5.0-macos-aarch64.pkg (Apple Silicon)	77f4073222b85ebca713d833ba4d3a9faffa966fb64249434b1b15dc210b99f1	View scan
stormcloud-1.5.0-windows-arm64.msi (Windows on Arm installer)	da7a89482bbd3c209bcc231f9d8908bc4562a559f5c4820834659db8b4a65e21	View scan
stormcloud-1.5.0-windows-x86_64.msi (Windows installer)	6342ab960a918f2969ed8deb4b7ce2459309ccbaaf67ba3950b91bf35422cf2c	View scan

v1.4.0

Adds translating the app into about 30 languages.

Added

• Language: the app can be shown in about 30 languages, including Welsh, Irish, French, German,
  Spanish, Polish and Ukrainian, from File › Language…. It is translated on your computer by a
  local AI model in Ollama, so nothing is sent over the internet. Each translation is saved as a
  file you can correct or share, and anything not yet translated is shown in English. CSV and
  database exports of a list stay in English, so they read the same whatever the language.

Changed

• Smaller macOS and Linux downloads: the program no longer includes its symbol table, as on
  Windows.

VirusTotal scans

Download	SHA-256	Report
stormcloud-1.4.0-amd64.deb (Ubuntu)	2ed43f775604ecacc79122fda8c1aa146be6d32df9449d0da5a52f295a0e5748	View scan
stormcloud-1.4.0-macos-aarch64.pkg (Apple Silicon)	8a81f587111a7c6f645c79e1a3b09352cb3d2b692210cfc0546d66cd4cfb17ed	View scan
stormcloud-1.4.0-windows-x86_64.msi (Windows installer)	406dee74b9201a32cc9f827845873099b083cbbf05035416a5d50b0e256dcb65	View scan

v1.3.0

Adds managing users' authentication and security, and wizards for onboarding and offboarding.

Added

• Authentication & security: three new tabs on a user's properties. A summary of whether
  they can sign in, with their last sign-ins, MFA registration and troubleshooting findings; their
  authentication methods (Microsoft Authenticator, phones, passkeys and FIDO2 keys, Windows Hello
  for Business and more, with phone numbers masked), which can be deleted; and their recent
  sign-ins with application, result, IP address, location and Conditional Access results.
• Revoke sessions, Temporary Access Pass and Require MFA re-registration for a user.
• Onboard user: a wizard that creates a user with their manager, licences and groups, which
  can be copied from another user, and a generated password that must be changed at first sign-in.
• Offboard user: a wizard that blocks sign-in, revokes sessions, removes directory roles
  (including PIM eligibility), converts the mailbox to shared and sets forwarding, removes groups
  and licences, and can delete the account. It shows every change first, runs them in an order
  that keeps the mailbox safe, and skips steps whose prerequisites failed.
• Both wizards end with a report of every step that can be saved or copied, and only report
  success when every step succeeded.
• The permissions UserAuthenticationMethod.ReadWrite.All and AuditLog.Read.All are asked for
  only when a feature first needs them.

Fixed

• The saved sign-in (token.json) could be readable by other users of the computer for a moment
  while it was written on macOS and Linux, and kept the permissions of an older file. It is now
  created readable only by you.
• New user and Edit now check that a usage location is a two-letter country code, as the CSV
  import does, rather than leaving Microsoft Graph to refuse it.

VirusTotal scans

Download	SHA-256	Report
stormcloud-1.3.0-amd64.deb (Ubuntu)	8c2e68a5bcc232ad85facad9945ae4e3f176f852ba0dcc0d8b0f65f41780e2db	View scan
stormcloud-1.3.0-macos-aarch64.pkg (Apple Silicon)	caa8bdda5c4c30f4d6cfd35bac54b1077586997d16f1d1595dfe841a54026046	View scan
stormcloud-1.3.0-windows-x86_64.msi (Windows installer)	f68e032d538c4deb313774db486a75d77680a46ece92a13e731e0352000c4fc1	View scan

v1.2.0

Adds managing connected applications and Exchange Online, and a check for new versions.

Added

• Applications: a new node listing the enterprise applications connected to the tenant (as in
  the Entra admin centre, leaving out Microsoft's own applications and managed identities).
  Enable or disable sign-in, delete, and set whether assignment is required and whether users see
  the application. Its properties show the users and groups assigned (with their app role), its
  owners, and the application and delegated permissions granted to it, which can be revoked.
• New default scopes Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All and
  DelegatedPermissionGrant.ReadWrite.All. After signing in, they are added to a saved Scopes
  setting without them once granted; if they haven't been, you are asked once whether an
  administrator wants to approve them. Sign-in is never refused because of them.
• Exchange Online: a new node with Mailboxes and Distribution lists. Create shared
  mailboxes, convert between user and shared mailboxes, set forwarding and automatic replies,
  manage Full Access, Send As and Send on behalf, and hide mailboxes from address lists. Create,
  edit and delete distribution lists and mail-enabled security groups, and manage their members.
  It uses the REST endpoint behind the Exchange Online PowerShell module, needs the delegated
  Exchange.Manage permission (approval is offered if it is missing) and an Exchange role.
• Update check: at startup, a dialog says when a newer release is on GitHub, with its notes, a
  link to download it, and a choice to skip that version. Help › Check for updates… checks at
  any time, and the startup check can be turned off in Settings.

VirusTotal scans

Download	SHA-256	Report
stormcloud-1.2.0-amd64.deb (Ubuntu)	55750a1e57c2d8546be6cd6ea2580bb8596a11759b8d604526d1ba6619b5f0b1	View scan
stormcloud-1.2.0-macos-aarch64.pkg (Apple Silicon)	30600bb09ea98d4609fcb0f244b7af05f34c7ee04bbbb29d0e34078d0801eb78	View scan
stormcloud-1.2.0-windows-x86_64.msi (Windows installer)	04338ccc3b9eb9777fc016515316ee5d7247869f0ee56b67dca2fea7e540b073	View scan

v1.1.0

Adds exporting a list to a MariaDB server, and fixes bugs in sign-in and the result list.

Added

• Export to MariaDB: Export to MariaDB… saves the current list to a table on a MariaDB server,
  creating the table if needed and updating rows by object ID on later exports. The connection is
  remembered, apart from the password.

Fixed

• Turning off "Remember sign-in" now takes effect straight away. Before, the sign-in was saved to
  disk again at the next token refresh, and turning it on did nothing until a restart.
• The selection no longer moves to a different object when the list is refreshed.
• A list still loading when you signed out or changed tenant could appear afterwards, under the
  new sign-in.
• Generated passwords no longer start with -, + or =, which were saved with an apostrophe in
  front in the import results file.
• A temporary error from the Microsoft sign-in service no longer discards the saved sign-in.
• A list that stops at 20,000 objects now says so in the status bar.

VirusTotal scans

Download	SHA-256	Report
stormcloud-1.1.0-amd64.deb (Ubuntu)	e66782ceb495ec31735c7602915804dba758b6bbd336872582e3f189c055e9a4	View scan
stormcloud-1.1.0-macos-aarch64.pkg (Apple Silicon)	6228bfcec5d3bef6ea33649bbc769148f9007f102f96eade0404f7ca3c22a23e	View scan
stormcloud-1.1.0-windows-x86_64.msi (Windows installer)	4f052075aeb515e478dfef5f3ca415a38a5d7df2ebbe4c88a1e38705a299a783	View scan

v1.0.0

The first release: a desktop console for Microsoft Entra ID, laid out like a classic MMC snap-in,
that talks to Microsoft Graph directly.

Added

• Users: create, edit, enable or disable, delete and reset passwords; manage group membership,
  licences and directory roles.
• Groups: create security and Microsoft 365 groups, optionally role-assignable; edit and delete;
  manage members, owners, licences and directory role assignments.
• Devices: view details, owners, users and group membership; enable or disable; delete.
• Licences: view subscriptions, service plans and licensed users; assign or remove licences.
• CSV export: Export list… saves the current list, as filtered and sorted on screen, in a form
  Excel opens correctly.
• CSV import: create users in bulk, or add members to a group, from a CSV file. Every row is
  checked and shown before anything changes, and the results can be saved afterwards.
• Sign-in with a device code in your browser, optionally remembered between sessions, against
  the global or a national Microsoft cloud.
• Full keyboard control (F1 lists the shortcuts) and screen reader support.
• A debug log that records every Graph request with its request-id, with passwords, secrets and
  tokens masked.
• Installers: a Windows MSI that installs without administrator rights, an Ubuntu/Debian .deb
  (Ubuntu 22.04 and later), and a macOS .pkg for Apple Silicon (macOS 11 and later).

VirusTotal scans

Download	SHA-256	Report
stormcloud-1.0.0-amd64.deb (Ubuntu)	9ed16fc12e2c92ff129110ee77799ac123135032cc76f92b09768c4eedfcb78b	View scan
stormcloud-1.0.0-macos-aarch64.pkg (Apple Silicon)	383341552c5ecc3b7689abfd2e9c0a025f356ceaa4b8777e9b22ec915bc2943b	View scan
stormcloud-1.0.0-windows-x86_64.msi (Windows installer)	018b4b0a7c00328d44224dca78806599bf04051d77f450cc894f3eb29c71dd12	View scan