https://www.m365.fm/entity/microsoft-graph-permissions/Microsoft Graph permissions, also called scopes, define what an app may access; delegated permissions let an app act for a signed-in user, while application (app-only) permissions let it act with its own identity, often requiring admin consent.enhttps://www.m365.fm/community/u/mirko-p/blog/mastering-microsoft-graph-permissions-avoiding-the-least-privilege-trap/https://www.m365.fm/community/u/mirko-p/blog/mastering-microsoft-graph-permissions-avoiding-the-least-privilege-trap/Fri, 28 Aug 2026 02:56:03 -0000articleWhen you start building applications, writing automation scripts, or integrating third-party tools into your Microsoft 365 environment, Microsoft Graph quickly beco…https://www.m365.fm/community/u/mirko-p/blog/delegated-vs-application-permissions-choosing-the-right-model-for-your-app/https://www.m365.fm/community/u/mirko-p/blog/delegated-vs-application-permissions-choosing-the-right-model-for-your-app/Tue, 11 Aug 2026 19:57:22 -0000articleWelcome back to the podcast and our ongoing series helping you master Microsoft 365, Azure, and the developer tools that power the modern cloud ecosystem. If you ha…https://www.m365.fm/show/episodes/the-hidden-logic-of-microsoft-graph/https://www.m365.fm/show/episodes/the-hidden-logic-of-microsoft-graph/Fri, 03 Jul 2026 00:00:00 -0000episodeMicrosoft Graph is much more than a REST API—it is the hidden logic that connects Microsoft 365. Instead of treating Outlook, Teams, SharePoint, OneDrive, Entra ID, and other services as isolated products, Microsoft Graph exposes the relationships between…https://www.m365.fm/show/episodes/ai-agents-shadow-it-threats-and-governance/https://www.m365.fm/show/episodes/ai-agents-shadow-it-threats-and-governance/Mon, 15 Dec 2025 00:00:00 -0000episodeShadow IT didn’t disappear, it evolved into AI agents quietly moving your data faster than your controls can see. In this episode, we break down how AI agents, Copilot Studio bots, and Power Automate flows are becoming the new Shadow IT inside Microsoft 365.…https://www.m365.fm/show/episodes/copilots-compliant-by-design-claim-exposed/https://www.m365.fm/show/episodes/copilots-compliant-by-design-claim-exposed/Mon, 03 Nov 2025 00:00:00 -0000episodeThe EU AI Act doesn’t just regulate model makers—it deputizes deployers. Rolling out tools like Microsoft 365 Copilot or ChatGPT makes you responsible for risk classification, documentation, transparency, and monitoring. The “risk ladder” (unacceptable, high…https://www.m365.fm/show/episodes/governed-ai-keeping-copilot-secure-and-compliant/https://www.m365.fm/show/episodes/governed-ai-keeping-copilot-secure-and-compliant/Sat, 16 Aug 2025 00:00:00 -0000episodeCopilot can overreach if Graph permissions are too broad. One mis-scoped app permission lets AI surface files, spreadsheets, and confidential client data users couldn’t normally access. Fix it by treating Copilot like any high-privilege app: lock Graph scopes…https://www.m365.fm/show/episodes/graph-api-permissions-consent-models-explained/https://www.m365.fm/show/episodes/graph-api-permissions-consent-models-explained/Mon, 11 Aug 2025 00:00:00 -0000episodeMost Graph-powered apps fail at rollout not because of code, but consent. Dev tenants allow broad testing; production enforces tight policies that block risky scopes. The fix is understanding Graph’s two models—delegated (user-in-context) vs. application…https://www.m365.fm/show/episodes/nobody-explains-microsoft-graph-consent-heres-whats-missing/https://www.m365.fm/show/episodes/nobody-explains-microsoft-graph-consent-heres-whats-missing/Tue, 05 Aug 2025 00:00:00 -0000episodeStop blindly clicking “Grant admin consent.” This deep dive demystifies Microsoft Graph app-only permissions—who consents, which scopes you actually need, and how tokens really work in production. Learn least-privilege setups, admin consent gotchas…https://www.m365.fm/show/episodes/youre-missing-critical-m365-compliance-data-heres-why/https://www.m365.fm/show/episodes/youre-missing-critical-m365-compliance-data-heres-why/Tue, 05 Aug 2025 00:00:00 -0000episodeYour Compliance Dashboard Is Lying to You: The Microsoft Graph Endpoints That Expose Hidden Risk (and How to Wire Them into Purview) If your M365 compliance reports always feel a step behind, you’re missing entire categories of incidents that never hit the…