Skip to content

admin

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History

admin

README.md

Microsoft 365 Admin

Examples for common admin-center tasks — service health and message center, SharePoint tenant settings, profile card customization, and the Exchange admin API.

Prerequisites

Permission Description
ServiceHealth.Read.All Read service health and message center
SharePointTenantSettings.ReadWrite.All Read / update SharePoint tenant settings
PeopleSettings.Read.All Read profile card properties
Exchange.ManageAsAppV2 Exchange admin calls (mailboxes, folder permissions)
AppRoleAssignment.ReadWrite.All (delegated) Grant the permission above, in exchange_permissions.py
RoleManagement.ReadWrite.Directory (delegated) Assign the directory role that answers for Exchange

The two Exchange grants are made once per tenant by exchange_permissions.py: it signs in as an administrator, checks both, assigns whichever is missing, then calls the API to prove they work. After that, exchange_admin.py is a plain read.

How it works

graph TD
    A[M365 Admin] --> B[Service health / message center]
    A --> C[SharePoint tenant settings]
    A --> D[Profile card]
    A --> E[Exchange admin API]
    B --> B1[health overviews / issues / messages]
    C --> C1[sharing, idle timeout, domains, legacy auth]
    D --> D1[custom profile card properties]
    E --> E1[organisation config / mailboxes / folder permissions]
Loading

Examples

Scenario File Permission
Message Center + Service Health report service_health_report.py ServiceHealth.Read.All
SharePoint / OneDrive tenant settings (+ opt-in updates) sharepoint_settings.py SharePointTenantSettings.ReadWrite.All
Custom profile card properties profile_card.py PeopleSettings.Read.All
Grant the Exchange permissions, then check them exchange_permissions.py Exchange.ManageAsAppV2, AppRoleAssignment.ReadWrite.All, RoleManagement.ReadWrite.Directory
Exchange organisation config + mailboxes exchange_admin.py Exchange.ManageAsAppV2
The same read, signed in with a certificate instead of a secret exchange_certificate.py Exchange.ManageAsAppV2

Quick start

from office365.graph_client import GraphClient

client = GraphClient(tenant="contoso.onmicrosoft.com").with_client_secret("client_id", "client_secret")

health = client.admin.service_announcement.health_overviews.get().execute_query()
for item in health:
    print(f"  {item.properties.get('service')}  {item.properties.get('status')}")

Not yet covered (need library additions)

  • Exchange message trace (mail-flow diagnostics) — module exists, nav not wired
  • M365 apps update channel — AdminMicrosoft365Apps empty
  • Admin report settings — empty model

Official docs