Excessive Privilege -> Not Using Microsoft Graph about 365inspect HOT 2 CLOSED

Hi there,

We made the decision to leverage Microsoft Graph as the Azure AD and MSOL PowerShell modules are being deprecated by Microsoft. This allows us to utilize the newer, modern endpoints and ensure the tool does not stop functioning when the older modules are completely deprecated.

Unfortunately, it is not possible to completely avoid the Global Administrator requirement. As noted in the README and the linked Microsoft documentation, the permissions required by Microsoft Graph require administrative consent.

After the consent is granted, lesser permissions - Global Reader for example, may be able to use the tool.

Also, due to Microsoft limitations, it is not possible to avoid the requirement of SharePoint Administrator.

We are working on additional methods that may help mitigate some of the concerns surrounding the required permissions and the limitations imposed by Microsoft to access certain functions and endpoints necessary to return queried data.

from 365inspect.

Thanks for the explanation @ThoughtContagion . I am closing this issue now.

from 365inspect.