All articles

  1. Governance & security

    Giving an application access to specific SharePoint sites with Sites.Selected

    An application needs one SharePoint site and the request on the table is Sites.Read.All or Sites.FullControl.All for the whole tenant. This article sets out what Sites.Selected grants on its own, who can create the per-site grant, the Microsoft Graph and PnP PowerShell calls that create, list and remove it, and where the documentation stops.

    ·8 min read

    Keep reading →
  2. Development & automation

    Reading a SharePoint list with more than 5,000 items without hitting the list view threshold

    A script or view that worked for years fails once a list passes 5,000 items, even when the filter matches a handful of rows. This article establishes what the list view threshold measures, where it can and cannot be changed, and how to page through a large list with PnP PowerShell, REST and Microsoft Graph.

    ·9 min read

    Keep reading →
  3. Governance & security

    The last Graph page is not proof of tenant coverage

    A successful response, an exhausted page chain and a complete population are three different claims. A small offline experiment shows where an apparently reliable collector can silently change one into another.

    ·4 min read

    Keep reading →
  4. Development & automation

    A retry that sends a POST twice

    A client that never received the response cannot know whether its create was applied, and a retry can write the record twice. What HTTP allows a client to repeat, which Microsoft 365 failures mean the write was refused, where integrations inherit retries they did not write, and how to make a SharePoint or Graph create safe to repeat.

    ·15 min read

    Keep reading →
  5. Development & automation

    The API an integration can call after it moves to .NET 10

    Moving an integration to .NET 10 changes which SharePoint libraries it can load and which sign-in it can keep. SharePoint Online takes Microsoft Graph, SharePoint REST or the .NET Standard CSOM, each with a Microsoft Entra ID token. Subscription Edition takes REST with the farm's own authentication, because the CSOM Microsoft documents for on-premises SharePoint is the .NET Framework build.

    ·13 min read

    Keep reading →
  6. Development & automation

    Sending email from an application, without a single password

    Microsoft turned off SMTP with a password. The answer is not to store a better secret: it is to store no secret at all. Managed identity, Microsoft Graph, and Mail.Send tied to a group of mailboxes. Here is the whole configuration, mistakes included.

    ·5 min read

    Keep reading →

Categories

Send us a message

or write to hello@ph7x.com

Contact