msgraph-sdk-powershell VS Microsoft365DSC

Information here https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/1439 indicates problems with specific powershell and module versions. My testing has not found a working combination.

You can go to the GitHub for the PowerShell SDK and write in for specific help with the MSGraph cmdlets, over the course of a few days/weeks usually, but a lot of times it ends up as something like "That isn't available in the Graph API, so we can't do anything with it" Example 1 Example 2 Example 3

Hey man, just wanted to follow up with you on this. So it turns out the query isn't as straight forward as doing a select-object clause. When you listed that "identities" is the possible key term, I switched up my Google tactic and instead searched for get-mguser identities.emailAddress and I found this github comment thread.

MSOL is quickly being depreciated. The Licensing endpoints were already turned off this month. If you're building anything new at this point, you should be using Graph.

I have seen this post on Github that I don't understand completely. Maybe I have to wait for Microsoft to correct it ? Do you also have the same problem ? Thank you for your help !

That's cool to make your own cmdlets and all, but Microsoft.Graph.DeviceManagement latest version was published 12 days ago. You may want to double check the Graph SDK. https://github.com/microsoftgraph/msgraph-sdk-powershell/wiki/MS-Graph-PowerShell-Modules

Or MS' own DSC solution!

M365 DSC documentation has a list of 'resource list' at https://github.com/microsoft/Microsoft365DSC/wiki/Resources-List but this list does not translate to a few modules we have: Defender for Identity, Power BI, Azure information protection, Defender for cloud apps, defender for O365. Are these M365 components/features supported by M365 DSC, if so under which resources? are there any gotcha's when trying to use DSC to export the config and use it on another tenant?

Microsoft365DSC is an Open-Source initiative hosted on GitHub, lead by Microsoft engineers and maintained by the community. It allows you to write a definition for how your Microsoft 365 tenant should be configured, automate the deployment of that configuration, and ensures the monitoring of the defined configuration, notifying and acting on detected configuration drifts. It also allows you to extract a full-fidelity configuration out of any existing Microsoft 365 tenant. The tool covers all major Microsoft 365 workloads such as Exchange Online, Teams, Power Platforms, SharePoint and Security and Compliance.

Links about: https://microsoft365dsc.com/ https://github.com/microsoft/Microsoft365DSC DSC Community Microsoft 365 Virtual Marathon - Microsoft365DSC, The next best thing since sliced bread

If handling CUI (CMMC ML3 or higher), you'll need to demonstrate practice and process maturity, take a look at Microsoft365DSC https://github.com/Microsoft/Microsoft365DSC. Combination of detective controls to implement: generate alerts if the configuration that requires encryption changes/generate logs providing positive verification that the configuration is in place; perform automated audits of the configuration on a regular schedule to validate that the configuration is in place. In both cases, retain the evidence (log files, alerts, DSC exports, etc.) so assessors can see that the configuration has been in place and that oversight is continuous and proactive.

Use https://github.com/microsoft/Microsoft365DSC to capture your environment or making changes to it to, commit to a public repository and add to your resume.