https://janbakker.tech/categories/power-platform/Recent content in Power Platform on JanBakker.techHugoen-USJan BakkerFri, 02 Jun 2023 09:50:08 +0000https://janbakker.tech/send-an-email-on-a-new-azure-mfa-method-registration/Fri, 02 Jun 2023 09:50:08 +0000https://janbakker.tech/send-an-email-on-a-new-azure-mfa-method-registration/<p>I&rsquo;ve done quite some Azure MFA projects over time (and counting), and as we mainly focus on the technical side, there are also practical sides to consider. Every project has its own approach and challenges, and more importantly: the user is impacted more or less, and that asks for some guidance.</p>https://janbakker.tech/microsoft-365-self-service-using-power-apps/Wed, 12 Jan 2022 15:12:05 +0000https://janbakker.tech/microsoft-365-self-service-using-power-apps/<p>This <a href="https://techcommunity.microsoft.com/t5/microsoft-365-pnp-blog/microsoft-365-self-service-using-power-apps/ba-p/3056109" rel="noopener">article</a> was originally posted on the <a href="https://techcommunity.microsoft.com/t5/microsoft-365-pnp-blog/bg-p/Microsoft365PnPBlog" rel="noopener">Microsoft 365 PnP Blog</a>.</p> <p>I was inspired by <a href="https://www.loryanstrant.com/2021/10/13/automate-your-windows-11-upgrade-with-forms-power-automate-and-intune/" rel="noopener">this post</a> from Loryan Strant, that used Microsoft Forms to add users to an Azure AD group so that they were upgraded to Windows 11. With that in mind, I created a mock-up and <a href="https://twitter.com/janbakker_/status/1470673405183770625" rel="noopener">posted</a> it on Twitter.</p>https://janbakker.tech/act-on-group-membership-changes-in-azure-active-directory/Mon, 10 Jan 2022 12:59:57 +0000https://janbakker.tech/act-on-group-membership-changes-in-azure-active-directory/<p>Did you ever want to act on a change in group membership in Azure AD, for example, when a user is added to or removed from a specific group? I have found an easy way to do this with the use of Power Automate. You can use this for a lot of use-cases.</p>https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/Mon, 09 Aug 2021 18:05:00 +0000https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/<h2 id="part-1---introduction-and-overview">Part 1 - Introduction and overview<a class="anchor" href="#part-1---introduction-and-overview" aria-label="Link to this section">#</a></h2> <p>This article is part of a series.</p> <p> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/">Part 1</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/">part 2</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/">Part 3</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/">Part 4</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/">Part 5</a> <a href="https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/">Part 6 (BONUS)</a></p> <hr> <p>When I learned about Graph API, and how to use it together with Power Apps and Power Automate, a whole new world of possibilities opened up. Being able to pull data out of Graph API and use this data within PowerApps is the key to creative solutions built around and on top of Microsoft 365. The gap between a developer and a technical or functional M365 consultant becomes closer, as a lot of automation can be done with these tools as well. You don&rsquo;t have to be a PowerShell guru these days to do some magical automation and development. Just connect the dots with low/no-code solutions does the trick.</p>https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/Mon, 09 Aug 2021 18:04:00 +0000https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/<h2 id="part-2-app-registration-and-graph-api-permissions">Part 2: App registration and Graph API permissions<a class="anchor" href="#part-2-app-registration-and-graph-api-permissions" aria-label="Link to this section">#</a></h2> <p>This article is part of a series.</p> <p> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/">Part 1</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/">part 2</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/">Part 3</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/">Part 4</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/">Part 5</a> <a href="https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/">Part 6 (BONUS)</a></p> <hr> <p>This part of the series is around laying the base for your custom connector that we are going to build later on. Before we can do that, we need to create an app registration in Azure Active Directory. This app registration will hold the permissions and the secret.</p>https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/Mon, 09 Aug 2021 18:03:00 +0000https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/<h2 id="part-3-graph-api-and-graph-explorer">Part 3: Graph API and Graph Explorer<a class="anchor" href="#part-3-graph-api-and-graph-explorer" aria-label="Link to this section">#</a></h2> <p>This article is part of a series.</p> <p> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/">Part 1</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/">part 2</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/">Part 3</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/">Part 4</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/">Part 5</a> <a href="https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/">Part 6 (BONUS)</a></p> <hr> <p>If you are new to Graph API, Graph Explorer is a great tool to learn the first steps into the Microsoft Graph. Next to that, it will also help you to shape your custom connector in the next part. Before diving into that, we&rsquo;ll need to understand how Graph API works, and how Graph Explorer can help you with that.</p>https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/Mon, 09 Aug 2021 18:02:00 +0000https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/<h2 id="part-4-build-a-custom-connector-based-on-the-graph-api">Part 4: Build a custom connector based on the Graph API<a class="anchor" href="#part-4-build-a-custom-connector-based-on-the-graph-api" aria-label="Link to this section">#</a></h2> <p>This article is part of a series.</p> <p> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/">Part 1</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/">part 2</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/">Part 3</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/">Part 4</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/">Part 5</a> <a href="https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/">Part 6 (BONUS)</a></p> <hr> <p>Now that we know the basics, as discussed in previous parts, it&rsquo;s time to build the custom connector. This custom connector is going to use the Graph API. Before we start building, make sure you have these things at hand:</p>https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/Mon, 09 Aug 2021 18:01:00 +0000https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/<h2 id="part-5-create-an-app-in-powerapps-using-a-custom-connector">Part 5: Create an app in PowerApps using a custom connector<a class="anchor" href="#part-5-create-an-app-in-powerapps-using-a-custom-connector" aria-label="Link to this section">#</a></h2> <p>This article is part of a series.</p> <p> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/">Part 1</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/">part 2</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/">Part 3</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/">Part 4</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/">Part 5</a> <a href="https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/">Part 6 (BONUS)</a></p> <hr> <p>This is the part where everything comes together. In this final part of the series, we are going to build a PowerApp based on the custom connector that we created. There is some stuff that you have to figure out on your own, like how to edit text on a button, or how to change color, icon type, and borders for example. Most of the stuff is just drag-and-drop. The complex part is in the properties of the items. We will get to that later. First, make yourself comfortable with the interface of the PowerApp designer. Add some of the components to see how they work and how they can be used. If you feel ready, let&rsquo;s make our app!</p>https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/Sun, 08 Aug 2021 13:01:00 +0000https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/<h2 id="bonus-part-6-integrate-with-power-automate">(Bonus) Part 6: Integrate with Power Automate<a class="anchor" href="#bonus-part-6-integrate-with-power-automate" aria-label="Link to this section">#</a></h2> <p>This article is part of a series.</p> <p> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-1/">Part 1</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-2/">part 2</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-3/">Part 3</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-4/">Part 4</a> <a href="https://janbakker.tech/how-to-build-a-powerapp-temporary-access-pass-manager-part-5/">Part 5</a> <a href="https://janbakker.tech/bonus-how-to-build-a-powerapp-temporary-access-pass-manager-part-6/">Part 6 (BONUS)</a></p> <hr> <p>This is the last part of this series where we are going to add one more feature to our PowerApp. The app is already capable of creating, listing, and deleting a Temporary Access Pass for a user. In this episode, we create a button that will send the Temporary Access Pass to the mobile phone number of the user. In the previous parts, we used a custom connector straight from the PowerApp, but in this example, I will show you how to integrate with Power Automate flows.</p>https://janbakker.tech/getting-everyone-enrolled-for-azure-mfa-and-sspr-how-hard-can-it-be/Thu, 01 Jul 2021 20:28:52 +0000https://janbakker.tech/getting-everyone-enrolled-for-azure-mfa-and-sspr-how-hard-can-it-be/<p>I&rsquo;ve done quite some Azure MFA implementations over the past few years, and none of them were the same. But one thing that was often the same is the way Azure MFA (or SSPR) was implemented: in <strong>two</strong> steps.</p> <p>First, you want to get your users enrolled ASAP. Once everybody (or at least the vast majority) is enrolled, you can enforce Azure MFA, so that your identities are better protected against phishing. It is pretty straightforward.</p>https://janbakker.tech/power-automate-not-your-daddys-rss-reader/Wed, 16 Jun 2021 19:57:15 +0000https://janbakker.tech/power-automate-not-your-daddys-rss-reader/<p>Here&rsquo;s a quick tip for all you eager learners out there. If you don&rsquo;t want to miss any new articles from your favorite website, consider using Power Automate to keep up to date.</p> <p> <img src="https://cdn.techcommunity.microsoft.com/assets/PowerPlatform/xuPlE1EJ_400x400.png" alt="Power Automate - Microsoft Tech Community" loading="lazy" decoding="async" referrerpolicy="no-referrer"> </p> <p>For example, you can add new articles straight to your Microsoft To-Do list, or maybe you want to be notified by email or chat about it. Let&rsquo;s have a look how easy it is to set up.</p>https://janbakker.tech/license-on-demand-with-power-automate-and-azure-ad/Sun, 18 Oct 2020 15:49:41 +0000https://janbakker.tech/license-on-demand-with-power-automate-and-azure-ad/<p>Most organizations are using <a href="https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-licensing-whatis-azure-portal" rel="noopener">group-based</a> licensing in Azure Active Directory. This is often integrated with the onboarding process of the users. But there are some use cases where you have some non-standard licenses attached to your tenant that you hand out on demand. You could still use group-based licensing, but users are added manually to the group.</p>https://janbakker.tech/azure-mfa-authentication-method-analysis-share-the-results-with-power-automate/Tue, 08 Sep 2020 20:34:51 +0000https://janbakker.tech/azure-mfa-authentication-method-analysis-share-the-results-with-power-automate/<p>You might have seen the <a href="https://docs.microsoft.com/en-us/samples/azure-samples/azure-mfa-authentication-method-analysis/azure-mfa-authentication-method-analysis/" rel="noopener">sample script</a>, created by the Microsoft community, to run some analysis on your Azure MFA authentication methods. This script can be used to make recommendations on how to improve each user&rsquo;s MFA configuration.</p> <p>You can run the script against your tenant, and the results can be exported to a CSV file. Wouldn&rsquo;t it be cool to share those results with your users straight away? With the use of Power Automate (Flow), we can easily send recommendations to each of our end users. Today I&rsquo;ll show you how this can be done in a few clicks.</p>https://janbakker.tech/use-microsoft-graph-security-for-end-user-notifications/Wed, 19 Aug 2020 13:11:23 +0000https://janbakker.tech/use-microsoft-graph-security-for-end-user-notifications/<p>In this short blog post, I want to show how you can use the Microsoft Graph Security to send alerts and notifications to your end-users. I also want to show you that it is super easy to set up. All you need is:</p>https://janbakker.tech/bulk-dismiss-risky-users-with-power-automate-or-logic-apps/Thu, 06 Aug 2020 07:48:02 +0000https://janbakker.tech/bulk-dismiss-risky-users-with-power-automate-or-logic-apps/<blockquote> <p><em><strong>Update 08-10-2020:</strong></em> Microsoft released an <a href="https://docs.microsoft.com/en-us/connectors/azureadip/" rel="noopener">official connector for Azure AD Identity Protection</a>. This would be much easier to use, since you don&rsquo;t have to create a service principal to authenticate the custom connector. However, at the time of writing the official connector does not have the action to get all the risky users. Will keep an eye on things.</p> </blockquote>https://janbakker.tech/prepopulate-phone-methods-using-a-custom-connector-in-power-automate/Thu, 30 Jul 2020 07:30:00 +0000https://janbakker.tech/prepopulate-phone-methods-using-a-custom-connector-in-power-automate/<p>This blog post shows the custom connector that is built on top of the Microsoft Graph API. With this connector, you can do bulk actions on Azure AD and provision phone numbers for your users. They can be used for MFA and SSPR. To understand how the connector works, please also read the first part of the blog where I explain the API in detail. In the second part, I have added a step-step-guide on how to create the custom connector and use it in an automation flow.</p>https://janbakker.tech/prepopulate-phone-methods-for-mfa-and-sspr-using-graph-api/Thu, 30 Jul 2020 07:29:00 +0000https://janbakker.tech/prepopulate-phone-methods-for-mfa-and-sspr-using-graph-api/<p>This blog post shows the custom connector that is built on top of the Microsoft Graph API. With this connector, you can do bulk actions on Azure AD and provision phone numbers for your users. They can be used for MFA and SSPR. To understand how the connector works, please also read the first part of the blog where I explain the API in detail. In the second part, I have added a step-step-guide on how to create the custom connector and use it in an automation flow.</p>https://janbakker.tech/use-power-automate-as-your-ca-police-department/Sat, 04 Jul 2020 07:10:42 +0000https://janbakker.tech/use-power-automate-as-your-ca-police-department/<p>Last week, I was working on a <a href="https://janbakker.tech/microsoft-secure-score-series-14-designate-more-than-one-global-admin/">new blog for the Secure Score Series</a> regarding global admin and break glass accounts. I came to the point where I was thinking of possible scenarios that could go wrong with these accounts. What if someone accidentally added these users to a certain group? What if that group would be triggered in some policy or maintenance tasks? A lot of these actions can be discovered using Microsoft Cloud App Security and Azure Monitor. This way, you will be alerted when someone touches the accounts in any way, or if the account is used to sign-in.</p>https://janbakker.tech/use-power-automate-or-logic-apps-to-keep-an-eye-on-your-licenses/Sat, 27 Jun 2020 18:37:43 +0000https://janbakker.tech/use-power-automate-or-logic-apps-to-keep-an-eye-on-your-licenses/<p>I guess we&rsquo;ve all been there; you ran out of licenses in your Azure AD or Office 365 tenant. Despite you hang out in your admin portal every day, you were still taken by surprise when you discover an issue, caused by a license shortage. More often this is caused by the fact that the people who are responsible to buy these licenses, are not always IT admins. So it&rsquo;s easy to run out of licenses. Time to get this fixed.</p>https://janbakker.tech/use-graph-api-data-in-power-bi-using-logicapps/Sat, 09 May 2020 12:50:34 +0000https://janbakker.tech/use-graph-api-data-in-power-bi-using-logicapps/<p>Some things in the modern connected world seem so common that you just assume it&rsquo;s possible by nature. Getting your Microsoft Graph API data into Microsoft Power BI for example. That must be easy peasy right? Well&hellip;.</p> <p>When I start looking for ways to do this, I assumed there was a builtin connector available in Power BI that I could use. Guess what? There is not (yet). There is a connector for the <strong>Microsoft Security Graph</strong>, but that one &ldquo;only&rdquo; gives back the data from the security products. Just good to know that it&rsquo;s out there, but that&rsquo;s not what we&rsquo;re looking for.</p>https://janbakker.tech/use-power-automate-for-your-custom-dynamic-groups/Wed, 01 Apr 2020 19:52:46 +0000https://janbakker.tech/use-power-automate-for-your-custom-dynamic-groups/<h2 id="azure-ad-dynamic-groups">Azure AD Dynamic Groups<a class="anchor" href="#azure-ad-dynamic-groups" aria-label="Link to this section">#</a></h2> <p>Dynamic groups in Azure AD are awesome. I use them a lot. Dynamic groups can create groups based on attributes. For example, you can create a group that includes all the users from the Sales Team. The query for the group would look like this:</p>