Diving Deeper in the MS Graph API with PowerShell - solving problems - Robert Prüst - PSConfEU 2023 скачать в хорошем качестве

Diving Deeper in the MS Graph API with PowerShell - solving problems - Robert Prüst - PSConfEU 2023

Complete title Diving Deeper in the Microsoft Graph API with PowerShell - solving problems Summary In this session, I discussed the process of authentication using certificates in PowerShell with Microsoft Graph API. I explained how to upload a certificate to the Azure AD portal and create an app registration with the necessary permissions. I also demonstrated how to obtain a token using a certificate and retrieve users from the graph using the token. I compared the MG-Graph and Minigraph modules for certificate-based authentication, highlighting their different layouts and functionalities. I emphasized the importance of using certificates in a production-level environment and suggested using Azure Key Vault to store and renew certificates. I also covered the topic of retrieving delayed reports using network requests, using an example with Intune. I explained how to make POST requests to the "export jobs" endpoint and retrieve the job ID. I then demonstrated how to check if the report is ready and download it. Additionally, I touched on the topics of paging and throttling in Microsoft Graph API. I explained the concept of paging to retrieve data in chunks and handle large sets of results. I also discussed throttling and provided code examples on how to handle throttling errors and retry requests. Finally, I mentioned the benefits of batching requests in Microsoft Graph API to optimize queries and reduce throttling. Throughout the lecture, I addressed questions from the audience regarding various aspects of certificate-based authentication, limitations of not using managed identities, and the security implications of using certificates. Thank you to everyone who attended the session, and stay tuned for future sessions on PowerShell and its applications. Chapters: 00:00:00 Diving Deeper in the Microsoft Graph API with PowerShell - solving problems - Robert Prüst - P… 00:00:07 Introduction and Thanking Sponsors 00:02:06 Transition to VS Code and Certificate-Based Authentication 00:08:39 Using the MG graph module for Certificate-Based Authentication 00:12:56 Introduction to Listing Users and PowerShell Cmdlets 00:15:18 Importance of Certificate-Based Authentication 00:18:40 Understanding Report Export Jobs and Queued Requests 00:20:14 Saving customer Contoso in a designated file 00:22:48 Comparing the difference between InvokeWebRequest and REST method 00:24:42 Success! Obtained the URL for the report. 00:24:54 Automating Reports and Device Inventory 00:27:01 Working with NextLink for Retrieving Data 00:29:00 Querying for results and pagination 00:32:34 Throttling and handling 429 error messages 00:38:45 Microsoft's Approach: Batching Requests for Efficiency 00:39:49 Introduction to Querying Users and Groups 00:41:42 Possible Causes of Throttling and Batching Retry Period 00:42:43 Exploring alternative methods: managed identities and permissions 00:43:34 Limitations of not using managed identities over certificates 00:44:47 Managed Identities and Accessing Key Vault 00:45:47 Introduction and Opening Remarks