In this month’s call, we reviewed API changes and examined three focus topics: • Dave Randall from the Intune product team presented an introduction to the newly released Intune APIs available via Microsoft Graph • Martina Grom and Toni Pohl demonstrated Groups orchestration workflows using PowerApps, SharePoint Lists, Azure Functions and Microsoft Graph • Dmitry Pimenov walked through different options for storing custom data in the Microsoft Graph API

1. Microsoft Graph
Community Call
February 6th, 2018
8:00AM PST

2. • https://aka.ms/microsoftgraphcall
• Monthly cadence
• Next call: March 6th, 2018
• What’s new & how you can use it
• Meet the product teams behind Microsoft Graph
• Technical deep dives
• Q&A

3. Call agenda

4. Dmitry Pimenov Yina Arenas
@dpim @yina_arenas
Toni Pohl
@atwork
Martina Grom
@magrom
Dave Randall
@triplanedave

5. Microsoft Graph
Overview

6. Users Groups Outlook OneNote more…SharePoint IntuneTeams Azure ADPlanner Excel
https://graph.microsoft.com
Your app
Access user, group and organizational data

7. Operation Service endpoint
GET my profile https://graph.microsoft.com/v1.0/me
GET my files https://graph.microsoft.com/v1.0/me/drive/root/children
GET my photo https://graph.microsoft.com/v1.0/me/photo/$value
GET my mail https://graph.microsoft.com/v1.0/me/messages
GET my calendar https://graph.microsoft.com/v1.0/me/calendar
GET my manager https://graph.microsoft.com/v1.0/me/manager
GET last user to modify file foo.txt https://graph.microsoft.com/v1.0/me/drive/root/children/foo.txt/lastModifiedByUser
GET users in my organization https://graph.microsoft.com/v1.0/users
GET group conversations https://graph.microsoft.com/v1.0/groups/<id>/conversations
GET people related to me https://graph.microsoft.com/v1.0/me/people
GET my tasks https://graph.microsoft.com/beta/me/tasks
GET my notes https://graph.microsoft.com/beta/me/notes/notebooks
GET files trending around me https://graph.microsoft.com/beta/me/insights/trending
… more
https://graph.microsoft.com

8. /v1.0 /beta
/users /groups /sites /drives /devices more…
/users/dmitry
/users/dmitry/department
/users/dmitry/events
/users/dmitry/events?$top=5
$select $orderby
$filter $expand
$top $skip $skiptoken
/{version} ?{query-parameters}/{resource}/{id}/{property}

9. What’s new in
Microsoft Graph

10. GitHub

11. { "requests": [
{ "id": "1", "method": "GET", "url": "/me/drive/root:/{file}:/content" },
{ "id": "2", "method": "GET", "url": "/me/planner/tasks" },
{ "id": "3", "method": "GET", "url": "/groups/{id}/events" },
{ "id": "4", "url": "/me", "method": "PATCH",
"body": { "city" : "Redmond" },
"headers": { "Content-Type": "application/json" } }
] }
POST https://graph.microsoft.com/v1.0/$batch

12. Focus topics

13. Intro to Intune APIs
Dave Randall, Intune team

14. What is Intune?
Microsoft 365 - A complete, intelligent solution to empower
employees to be creative and work together, securely.
Intune provides tools to protect company data through…
Application Security
Protects data whether employees use store
apps, web apps, or line-of business apps.
App Protection Policies
Device Security
Protects data whether employees use
Windows PC’s, Android, iOS or OSX devices.
“MDM” Policies
Data Security
Protect data whether data is stored in the
cloud, on device or on-premises.
Conditional Access

16. Microsoft Cloud
3rd Party SaaS Apps
On Premises Apps
Microsoft Azure
Prevent data leak
Disable print
Restrict download
Enforce MFA
Block sign-in
Allow sign-in
Access Control
Restrictions
OS Platform
Is Compliant / Domain joined
Is lost or stolen
Device Risk
Device
User identity
Group membership
Session Risk
User
Mobile or Cloud app
Per app policy
App
Location
IP range
ApplicationsPolicy Controls
Conditional Access
Policy Conditions
Windows
Defender
Azure AD
Identity
Protection
Service

17. Quick Tour

18. The API’s for Intune
Anything that you can do in the Intune Azure Portal, you can do via Graph.
Intune is the largest Graph API product
surface area.
• 17 Intune feature teams have APIs in this
GA release
• 200+ separate APIs and 488 supporting
types shipped in GA
• More API’s transitioning to GA in coming
months
All Intune Administration via Graph
• Administrative actions (C,R,U,D, +)
• Auditing (think SEIM)
• Role Based Access Control
• Deployment of Apps, & Protection Policies
• Remote Tasks
Large focus on Automation
• PowerShell Sample Script Library
• 20 Partners building solutions with Preview
• Active ISVs to enhance and extend Intune
• Enterprise customers engaged early
• This Community Call!

19. Groups Automation
Toni Pohl & Martina Grom, MVPs

20. OPEN
CONTROLLED
Processes in
place
Reporting &
monitoring
Change
management

21. 1. User
enters
group
name in
PowerApp
2. Data is
sent to
SPO list
3. Flow is
triggered
and sends
approval
email
4. Manager
accepts or
rejects the
request
5. Reject:
Sender
gets a
denied
email
6. Accept:
Azure
function
starts
7. Azure
function
creates the
group +
owner
8. Flow
sends
email to
sender

22. http://bit.ly/atwork-graph1
https://github.com/martinagrom/Office365Scripts

23. Storage In Microsoft Graph
Dmitry Pimenov, Microsoft Graph team

26. Files.ReadWrite.AppFolder

30. GitHub gist
App specific data General purpose data
Store files
OneDrive app folders (for personal
accounts)
OneDrive root/other folders
Store roaming settings Open extensions Schema extensions

31. Community contributions

32. How to use Powershell to Access Microsoft Intune via Microsoft
Graph API
Paradigm shift in Modern SharePoint Search
Register an Azure AD application using Microsoft Graph
Microsoft Graph, Productivity Analytics and Workplace Trends
Onboarding [with] Microsoft Flow (feat. Microsoft Graph)
Automate API calls against Microsoft Graph using PowerShell and
Azure Active Directory Applications
Setting up Microsoft Graph Webhook with HTTP Action in Microsoft
Flow
Enterprise Apps Made Easy with New Authentication &
Microsoft Graph Libraries

33. https://aka.ms/OfficeDevYouTube
https://aka.ms/GraphCallQuestions
https://aka.ms/MicrosoftGraphCall

34. Q&A