Tag
7 articles
Copilot searches what a user can already access. That sounds reassuring until you consider how much people can technically access and never find. Readiness work is mostly permission hygiene, and it is worth doing before the rollout, not after.
Rajiv Kumar·Jun 17, 2026·13 min read
Power Pages puts Dataverse on the public internet. Table permissions and web roles are the entire access model — not page visibility, not hidden links — and understanding how a permission is scoped is what separates a safe site from an exposed one.
Rajiv Kumar·May 14, 2026·6 min read
Most Azure questions in a Microsoft 365 estate are identity questions wearing a disguise. Service principals, app roles, consent, managed identity and conditional access — answered with the reasoning that makes the answers reusable.
Rajiv Kumar·Apr 1, 2026·5 min read
Azure Access Control Services stopped working for SharePoint Online on 2 April 2026. Here is how to identify the applications it broke and move them to Microsoft Entra ID — using the migration to fix the over-broad permissions ACS encouraged.
Rajiv Kumar·Feb 27, 2026·7 min read
Power Platform DLP sorts connectors into Business, Non-business and Blocked, then prevents combining across groups. Here is how to build a policy people follow rather than route around.
Rajiv Kumar·Apr 17, 2024·4 min read
A permissions report covering every item is slow to produce and impossible to act on. Scoping it to broken inheritance and real grants turns it into a working document — here is the PowerShell and the reasoning behind it.
Rajiv Kumar·Jun 7, 2022·5 min read
External sharing is governed at tenant, site and item level, and the most restrictive setting wins. Here is how to set a sensible ceiling, raise individual sites, and review the guest access that accumulates silently.
Rajiv Kumar·Aug 2, 2021·5 min read
