Let me just drift around this corner
Hey CIPP Family, are you ready to get a little bit faster with deploying your standards at your clients, making them less furious? This release is one for you. After our latest tenant alignment updates our Discord started revving with excitement.
This version is called the Tokyo Drift, because that's what you asked for; better drift management that we can extend on in the future. And of course we delivered on this feature, because that's what family does. (These Fast & Furious puns are even annoying me, no worries)
Vroom Vroom, Drift management is here
So CIPP has always had its standards - Standards allow you to deploy your preferred settings to a tenant easily and create a baseline, but some of you wanted a bit more; you want to be alerted on every detail that is outside of your preferred configuration and have the ability to restore the config you want, or you want to remove the policies that have been added on accident. That's now possible with the new drift management.
Enabling a Drift Template allows you to receive emails or webhooks that you can setup per template, and you can approve, accept as a customer deviation, or deny easily using the management portal.
Now let me explain that a little more; when you setup a Drift Template, we start monitoring the environment if everything that you put in that Template has been deployed and is in the state that you want it. During setup of the template you have a choice; do you want to auto remediate this issue, or not.
If you select not to remediate, it'll generate a deviation error and let you know. It'll just report. You then have the choice to set it up correctly with a one-off job, until it deviates again.
I hear you I hear you. "How do I explore this? how do I play with it?!" well, the documentation has been updated, but even cooler, try our new demos!
Audit Logging has been pimped
So the biggest issue with Microsoft's audit logs is the many formats they use; Exchange logging puts usernames in weird places or adds underscores, an Entra audit log can have the users GUID, username, or primary email address as the username, but all in slightly different situation
So, we improved that, we now enrich the data in the audit logs with "CIPP" versions of them, for example "CIPPUsername" is 100% guaranteed to actually be the username, and not a random signifier. We didn't stop there. Why do that when you can expand what you have available. We added the ability to not just create audit log searches, but you can zoom in on each log entry, getting all the CIPP enhanced interace. No more messing with CSV or JSON files from the audit api.
Also, we made sure that for the log entries we also pull in the correct users when they come from your partner tenant. No more User_longguid, but immediately seeing edits made.
Of course we made a demo for you, check that one out here.
Want to see on how you setup alerting? Check that one out over here.
Making History
Another cool feature that we've built is tracking the history for tenants. We've always had the logbook, but those are a little hard to read, so we improved the filtering, and now generate a timeline of every single event CIPP had on a tenant inside of the standards management. That easily allows you to see what change was made and when.
Sponsors
We extend our gratitude to our supporters at https://renroros.no/, https://immy.bot/, https://oit.co/, https://ninjaone.com/, Huntress at https://huntress.com/, https://halopsa.com/, https://www.deskdirector.com/, https://hudu.com/, our friends at https://www.meetgradient.com/, https://rewst.io/ https://augmentt.com/ and newly added Domotz and Guardz!
What's Changed
- Chore: Update Microsoft licenses by @kris6673 in #4435
- Dev to hotfix by @KelvinTegelaar in #4448
- Fix: Fix convert mailbox action by @kris6673 in #4445
- Feat: Add Mailbox Activity report page by @kris6673 in #4444
- Fix: Now button time selection rounding logic by @kris6673 in #4462
- Fix: Fix blocked for spam and add alert text by @kris6673 in #4463
- Chore: Update license files to latest version by @kris6673 in #4466
- Fixes the interval getting overridden by the recommended value when editing existing alerts by @Zacgoose in #4474
- Add information about default configurations to docs helper by @Zacgoose in #4475
- Feat: Add securityEnabled field switch to Edit Group by @kris6673 in #4482
- Add SharePoint File Requests standard by @Zacgoose in #4484
- Add bulk mailbox permissions action by @Zacgoose in #4483
- Feat: Enhance tenant selection and add Deploy Policy button by @kris6673 in #4468
- Dev to release by @KelvinTegelaar in #4493
What's changed in CIPP-API:
- Fix: Manger and sponsor functions, fix casing, and add missing options when creating new users by @kris6673 in KelvinTegelaar/CIPP-API#1565
- Fix URL in Invoke-NinjaOneTenantSync.ps1 by @STG-Tanner in KelvinTegelaar/CIPP-API#1562
- Fix: Fix state and input validation logging for CloudMessageRecall by @kris6673 in KelvinTegelaar/CIPP-API#1563
- Fix: Fix blocked for spam parameters and logic by @kris6673 in KelvinTegelaar/CIPP-API#1564
- Fixed CIPPOffboardingJob missing $DisplayName for the -DisplayName param by @Zacgoose in KelvinTegelaar/CIPP-API#1570
- Add securityEnabled field switch by @kris6673 in KelvinTegelaar/CIPP-API#1573
- Add the ID of the consent request to output to enable deduplication by @dszp in KelvinTegelaar/CIPP-API#1572
- Better exception message handling for failed json conversion by @Zacgoose in KelvinTegelaar/CIPP-API#1571
- Extra info for pending app approvals by @Zacgoose in KelvinTegelaar/CIPP-API#1569
- Fix: EXO object matches multiple entries by @ngms-psh in KelvinTegelaar/CIPP-API#1568
- Fix: AuthMethodsPolicyMigration for newer tenants by @ngms-psh in KelvinTegelaar/CIPP-API#1567
- Chore: Update license files to latest version by @kris6673 in KelvinTegelaar/CIPP-API#1566
- chore: update alert object by @OfficialEsco in KelvinTegelaar/CIPP-API#1577
- chore: add try catch to CurrentState by @OfficialEsco in KelvinTegelaar/CIPP-API#1576
- Add Invoke-CIPPStandardSPFileRequests function by @Zacgoose in KelvinTegelaar/CIPP-API#1575
- Enhance mailbox permission modification and bulk request tracking by @Zacgoose in KelvinTegelaar/CIPP-API#1574
- Dev to release by @KelvinTegelaar in KelvinTegelaar/CIPP-API#1578
New Contributors
- @STG-Tanner made their first contribution in KelvinTegelaar/CIPP-API#1562
- @dszp made their first contribution in KelvinTegelaar/CIPP-API#1572
Full Changelog: v8.2.0...v8.3.0