Key Insights You Won't Want to Overlook About PnP PowerShell Changes
There's a big upgrade that can impact your scripts and automation processes if you use PnP PowerShell. What you should know is as follows.
What’s Changing?
The PnP Management Shell was a multi-tenant app registration that was previously used to access Microsoft 365. This made it possible for you to provide your scripts the permissions they need.
On September 9, 2024, however, the multi-tenant app registration was removed. Scripts that rely on it are no longer functional after this date.
Why the Change?
This change aims to enhance security by encouraging users to switch to single-tenant app registrations. These registrations allow you to specify only the permissions you need, reducing potential security risks.
Handle this change by following these simple steps:
Register an App in Azure to use PnP PowerShell
Thanks to recent enhancements in the PnP PowerShell Module, creating an app registration specific to a tenant is now really simple. PowerShell 7 or later version must be used because it is the only version of PnP PowerShell that is currently supported.
Registration of app can be done using the PnP command or one can follow the manual approach.
The user executing this action needs to have Global Administrator permission because we are creating the Entra ID application and the user needs to provide consent.
Steps to update are as follow:
1. Update the PnP PowerShell to latest version. Use the command mentioned below:
Update-Module PnP.PowerShell
2. After PnP PowerShell has been updated, we need to do the pnp powershell azure app registration, run the following command to create the tenant-specific application:
Register-PnPEntraIDApp -ApplicationName “PnP PowerShell Application Registration” -Tenant {yourtenantname}.onmicrosoft.com -Interactive
Change the application name to suit your needs and replace "{yourtenantname}" with your tenant name.
3. A consent prompt with the default permissions will show up when you execute this command. Your application will be finalized upon your acceptance. Following that, the ClientId/ApplicationId will be output by the command; be sure to copy this ID because you'll need it for the following procedures.
In the previous steps, we've successfully completed the registration process. Now, it’s time to update your existing scripts and connections. Make sure to keep the ClientId/ApplicationId generated earlier.
Current connection command/method might be like this :
Connect-PnPOnline -Url https://{yourtenantname}.sharepoint.com -Interactive
replace this command/method with the following command:
Connect-PnPOnline -Url https://{yourtenantname}.sharepoint.com -ClientId [ClientId] -Interactive
Please comment if you have any questions. Sharing is helpful!
Reference:
Comments
Post a Comment