Connect- MgGraph

In round 6 of the validation kit I wanted a remediation that only detected. Graph’s deviceHealthScript assignment has a property for that, runRemediationScript, described as whether to run the detection script only or both. I set it to false and assigned the policy to both test devices. The remediation ran every hour on both of them anyway: detection, remediation, detection, sixteen cycles on the joined device alone.

Your organization can implement phishing-resistant, modern, and passwordless authentication via user X.509 certificates by using Microsoft Entra certificate-based authentication (CBA). In this article, learn how to set up your Microsoft Entra tenant to either allow or require tenant users to authenticate by using X.509 certificates. A user creates an X.509 certificate by using an enterprise public key infrastructure (PKI) for application and browser sign-in.

Share via This article describes how to create a custom role in Microsoft Entra ID using the Microsoft Entra admin center, Microsoft Graph PowerShell, or Microsoft Graph API. For the basics of custom roles, see the custom roles overview. The role can be assigned either at the directory-level scope or an app registration resource scope only.