Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Excessive Privilege -> Not Using Microsoft Graph #72

Closed
za opened this issue Jul 31, 2023 · 2 comments
Closed

Excessive Privilege -> Not Using Microsoft Graph #72

za opened this issue Jul 31, 2023 · 2 comments
Assignees
Labels
question Further information is requested

Comments

@za
Copy link

za commented Jul 31, 2023

Is your feature request related to a problem? Please describe.
As written in README it requires excessive privileges and sometimes it's not possible to have Administrator privilege.

Describe the solution you'd like
Can we not use Microsoft Graph and just use ReadOnly permission?

@ThoughtContagion
Copy link
Collaborator

Hi there,

We made the decision to leverage Microsoft Graph as the Azure AD and MSOL PowerShell modules are being deprecated by Microsoft. This allows us to utilize the newer, modern endpoints and ensure the tool does not stop functioning when the older modules are completely deprecated.

Unfortunately, it is not possible to completely avoid the Global Administrator requirement. As noted in the README and the linked Microsoft documentation, the permissions required by Microsoft Graph require administrative consent.

After the consent is granted, lesser permissions - Global Reader for example, may be able to use the tool.

Also, due to Microsoft limitations, it is not possible to avoid the requirement of SharePoint Administrator.

We are working on additional methods that may help mitigate some of the concerns surrounding the required permissions and the limitations imposed by Microsoft to access certain functions and endpoints necessary to return queried data.

@ThoughtContagion ThoughtContagion added the question Further information is requested label Jul 31, 2023
@ThoughtContagion ThoughtContagion self-assigned this Jul 31, 2023
@za
Copy link
Author

za commented Jul 31, 2023

Thanks for the explanation @ThoughtContagion . I am closing this issue now.

@za za closed this as completed Jul 31, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants