<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Least privilege – M365.FM</title><link>https://www.m365.fm/entity/least-privilege/</link><description>Least privilege is the security principle of giving an identity the smallest role at the smallest scope for the shortest time that still lets it do its work, limiting what an attacker can reach if the account is compromised.</description><language>en</language><item><title>Delegated vs Application Permissions in Microsoft Entra ID: What Admins Need to Know</title><link>https://www.m365.fm/community/u/mirko-p/blog/delegated-vs-application-permissions-entra-id/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/delegated-vs-application-permissions-entra-id/</guid><pubDate>Wed, 28 Oct 2026 22:51:07 -0000</pubDate><category>article</category><description>Learn the critical differences between delegated and application permissions in Microsoft Entra ID, including security best practices and least privilege rules.</description></item><item><title>Azure Lighthouse Security and Permissions: How to Manage Multi-Tenant Cloud Access Safely</title><link>https://www.m365.fm/community/u/mirko-p/blog/azure-lighthouse-security-multi-tenant-access/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/azure-lighthouse-security-multi-tenant-access/</guid><pubDate>Wed, 21 Oct 2026 10:22:48 -0000</pubDate><category>article</category><description>Learn how Azure Lighthouse security works, how to enforce least privilege across tenants, and how customers maintain total control over their cloud.</description></item><item><title>Permission FOMO: Why Over-Access Starts with Good Intentions</title><link>https://www.m365.fm/community/u/mirko-p/blog/permission-fomo-why-over-access-starts-with-good-intentions/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/permission-fomo-why-over-access-starts-with-good-intentions/</guid><pubDate>Fri, 28 Aug 2026 19:37:15 -0000</pubDate><category>article</category><description>Welcome back to the digital workplace. If you have ever been in charge of figuring out who gets access to what in your organization, you know that uneasy feeling in…</description></item><item><title>Uncovering the 'Invisible Tenant': Why High Productivity Doesn't Equal Strong M365 Security</title><link>https://www.m365.fm/community/u/mirko-p/blog/uncovering-the-invisible-tenant-why-high-productivity-doesnt-equal-strong-m365-security/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/uncovering-the-invisible-tenant-why-high-productivity-doesnt-equal-strong-m365-security/</guid><pubDate>Fri, 28 Aug 2026 04:24:59 -0000</pubDate><category>article</category><description>Welcome back to the podcast companion blog! In our daily work lives, we rely heavily on Microsoft 365 to collaborate, draft documents, schedule meetings, and chat w…</description></item><item><title>Mastering Microsoft Graph Permissions: Avoiding the Least Privilege Trap</title><link>https://www.m365.fm/community/u/mirko-p/blog/mastering-microsoft-graph-permissions-avoiding-the-least-privilege-trap/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/mastering-microsoft-graph-permissions-avoiding-the-least-privilege-trap/</guid><pubDate>Fri, 28 Aug 2026 02:56:03 -0000</pubDate><category>article</category><description>When you start building applications, writing automation scripts, or integrating third-party tools into your Microsoft 365 environment, Microsoft Graph quickly beco…</description></item><item><title>AI Turns Integration into an Organism as a Service — How Azure Logic Apps Are Changing Enterprise Integration with Sonny Gillissen [MVP]</title><link>https://www.m365.fm/show/episodes/sonny-gillissen/</link><guid>https://www.m365.fm/show/episodes/sonny-gillissen/</guid><pubDate>Tue, 18 Aug 2026 00:00:00 -0000</pubDate><category>episode</category><description>Enterprise integration is usually invisible until it breaks, and deterministic workflows struggle with the unexpected. This episode is for architects and integration developers who want to understand Azure Logic Apps, connectors, identity and observability…</description></item><item><title>Mastering Least Privilege in the Power Platform</title><link>https://www.m365.fm/community/u/mirko-p/blog/mastering-least-privilege-in-the-power-platform/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/mastering-least-privilege-in-the-power-platform/</guid><pubDate>Tue, 11 Aug 2026 13:27:43 -0000</pubDate><category>article</category><description>Welcome back, digital workplace enthusiasts! If you are anything like me, you remember that one time you broke something at work—maybe you were given a bit to…</description></item><item><title>Azure Network Security Groups - Simply Explained</title><link>https://www.m365.fm/show/episodes/azure-network-security-groups-simply-explained/</link><guid>https://www.m365.fm/show/episodes/azure-network-security-groups-simply-explained/</guid><pubDate>Fri, 17 Jul 2026 00:00:00 -0000</pubDate><category>episode</category><description>Azure Network Security Groups (NSGs) are one of the most important security features in Microsoft Azure, allowing you to control inbound and outbound network traffic for virtual machines, subnets, and other Azure resources. By defining security rules based on…</description></item><item><title>Microsoft 365 Copilot Agents: Real Business Value with Steve Corey [MVP]</title><link>https://www.m365.fm/show/episodes/beyond-chat-building-real-business-value-with-microsoft-365-copilot-agents-featuring-steve-corey-m/</link><guid>https://www.m365.fm/show/episodes/beyond-chat-building-real-business-value-with-microsoft-365-copilot-agents-featuring-steve-corey-m/</guid><pubDate>Wed, 15 Jul 2026 00:00:00 -0000</pubDate><category>episode</category><description>Microsoft 365 Copilot Agents have the potential to transform the way organizations work—but only when they move beyond simple chat experiences and become deeply integrated into real business processes. In this episode of the M365 FM Podcast, Mirko Peters is…</description></item><item><title>Microsoft Graph and PowerShell for Enterprise Automation</title><link>https://www.m365.fm/show/episodes/beyond-the-portal-the-strategic-architecture-of-microsoft-graph-and-powershell/</link><guid>https://www.m365.fm/show/episodes/beyond-the-portal-the-strategic-architecture-of-microsoft-graph-and-powershell/</guid><pubDate>Thu, 02 Jul 2026 00:00:00 -0000</pubDate><category>episode</category><description>Microsoft Graph is far more than just another API—it is the operational backbone of Microsoft 365. This episode explains why relying solely on admin portals limits scalability, visibility, and automation, while Microsoft Graph provides a unified interface for…</description></item><item><title>How to Build a Microsoft Copilot Agent Fabric</title><link>https://www.m365.fm/show/episodes/the-end-of-prompting-how-to-build-the-copilot-agent-fabric/</link><guid>https://www.m365.fm/show/episodes/the-end-of-prompting-how-to-build-the-copilot-agent-fabric/</guid><pubDate>Sun, 31 May 2026 00:00:00 -0000</pubDate><category>episode</category><description>he era of prompt engineering is ending. While organizations have spent years teaching employees how to write better AI prompts, this approach creates inconsistent results, limits scalability, and keeps humans trapped in every workflow step. Instead of relying…</description></item><item><title>AI Exposes Broken Processes, Bad Data, and Weak Leadership</title><link>https://www.m365.fm/show/episodes/ai-wont-fix-your-business-it-will-expose-it/</link><guid>https://www.m365.fm/show/episodes/ai-wont-fix-your-business-it-will-expose-it/</guid><pubDate>Sat, 28 Mar 2026 00:00:00 -0000</pubDate><category>episode</category><description>AI isn’t a repair layer for your business. It’s an exposure layer. In this episode, Mirko Peters breaks down a hard truth leaders keep missing: AI will not fix unclear ownership, messy access, or fragmented data — it will surface those weaknesses...</description></item><item><title>Why privileged accounts in Entra ID are your biggest hidden risk</title><link>https://www.m365.fm/community/u/mirko-p/blog/why-privileged-accounts-in-entra-id-are-your-biggest-hidden-risk/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/why-privileged-accounts-in-entra-id-are-your-biggest-hidden-risk/</guid><pubDate>Sun, 22 Mar 2026 06:35:40 -0000</pubDate><category>article</category><description>Privilege Access: A Top Security Risk &amp; Management Essentials. Learn about privilege access management and securing privileged accounts. Discover why managing privileged access is crucial to reduce b</description></item><item><title>How to Implement Least Privilege in Entra ID</title><link>https://www.m365.fm/community/u/mirko-p/blog/how-to-implement-least-privilege-in-entra-id/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/how-to-implement-least-privilege-in-entra-id/</guid><pubDate>Sun, 22 Mar 2026 06:26:21 -0000</pubDate><category>article</category><description>Learn how to implement least privilege in Entra ID with scoped roles, access reviews, privileged access, and practical governance controls.</description></item><item><title>Understanding the Microsoft Fabric Security Model</title><link>https://www.m365.fm/community/u/mirko-p/blog/understanding-the-microsoft-fabric-security-model/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/understanding-the-microsoft-fabric-security-model/</guid><pubDate>Wed, 11 Feb 2026 17:58:34 -0000</pubDate><category>article</category><description>Security isn’t something you tack on after the fact—especially in a modern analytics platform like Microsoft Fabric. Given the massive volumes of struct…</description></item><item><title>Scale Autonomous Agents in Microsoft 365 Without Chaos</title><link>https://www.m365.fm/show/episodes/agentic-advantage-governance-ai/</link><guid>https://www.m365.fm/show/episodes/agentic-advantage-governance-ai/</guid><pubDate>Tue, 10 Feb 2026 00:00:00 -0000</pubDate><category>episode</category><description>This episode of the M365.FM Podcast — “The Agentic Advantage: Scaling Intelligence Without Chaos” — explains why simply rolling out more AI agents does not automatically increase productivity, and why many enterprise agent programs collapse when they confront…</description></item><item><title>Protect Dynamics 365 Copilot Finance Controls</title><link>https://www.m365.fm/show/episodes/dynamics-ai-agent-lie-architectural-erosion/</link><guid>https://www.m365.fm/show/episodes/dynamics-ai-agent-lie-architectural-erosion/</guid><pubDate>Mon, 05 Jan 2026 00:00:00 -0000</pubDate><category>episode</category><description>Everyone thinks their controls still work because the dashboards are green — until the copilot makes a perfectly “authorized” decision no one can actually explain. This talk makes the case that tools like Dynamics 365 Copilot don’t just speed up work; they…</description></item><item><title>Power Platform Tenant Governance and Security Risks</title><link>https://www.m365.fm/show/episodes/power-platform-security-governance-best-practices/</link><guid>https://www.m365.fm/show/episodes/power-platform-security-governance-best-practices/</guid><pubDate>Mon, 29 Dec 2025 00:00:00 -0000</pubDate><category>episode</category><description>Is Power Platform actually dangerous for the enterprise—or is that fear hiding a more uncomfortable truth? In this episode, we dismantle the question executives keep asking: “Is Power Platform secure enough?” The answer is sharper than most teams expect.…</description></item><item><title>Secure AI Agents and Shadow IT in Microsoft 365</title><link>https://www.m365.fm/show/episodes/ai-agents-shadow-it-threats-and-governance/</link><guid>https://www.m365.fm/show/episodes/ai-agents-shadow-it-threats-and-governance/</guid><pubDate>Mon, 15 Dec 2025 00:00:00 -0000</pubDate><category>episode</category><description>Shadow IT didn’t disappear, it evolved into AI agents quietly moving your data faster than your controls can see. In this episode, we break down how AI agents, Copilot Studio bots, and Power Automate flows are becoming the new Shadow IT inside Microsoft 365.…</description></item><item><title>Automate Intune Device Cleanup with Azure Automation</title><link>https://www.m365.fm/show/episodes/intune-device-management-scalability-challenges/</link><guid>https://www.m365.fm/show/episodes/intune-device-management-scalability-challenges/</guid><pubDate>Sun, 07 Dec 2025 00:00:00 -0000</pubDate><category>episode</category><description>Stop patching ghosts and start running a self-healing workplace. This Podcast reveals why Microsoft Intune alone can’t scale your endpoint management – and how pairing Intune with Azure, Automation, Functions, Microsoft Graph, managed identities and Log…</description></item><item><title>Service Accounts vs App Registrations for Power Automate Email</title><link>https://www.m365.fm/show/episodes/power-automate-email-flows-compliance-guide/</link><guid>https://www.m365.fm/show/episodes/power-automate-email-flows-compliance-guide/</guid><pubDate>Sun, 23 Nov 2025 00:00:00 -0000</pubDate><category>episode</category><description>Your Power Automate email flows aren’t clever automations, they’re HR risk wrapped in HTML. You wire a flow to a “service account,” fight through MFA once, get it working, and decide it’s done. It’s not done. It’s brittle, over-privileged, impossible to audit…</description></item></channel></rss>