Managing Entra ID (formerly Azure AD) app permissions across SharePoint sites is crucial for maintaining proper security governance. This guide demonstrates how to audit and revoke app permissions using PnP PowerShell, ensuring your SharePoint environment remains secure and compliant. Table of Contents Problem Statement Understanding the Challenge Prerequisites The Solution Script Breakdown Important Considerations References Problem Statement When managing Entra ID applications with SharePoint access (especially those using Sites.Selected permissions), you may need to:

Problem Statement Mass applying sensitivity labels programmatically using Microsoft Information Protection SDK (MIP SDK) or PowerShell, the sensitivity label column appears blank in the document library UI, even though the metadata value is correctly set in the backend. This is a display refresh issue where the applied sensitivity labels has not synced to the SharePoint metadata. Root Cause When sensitivity labels are applied programmatically (via PowerShell, Graph API, or migration tools), the metadata is present in the file but not displayed in the interface.

Problem Statement When using the KQL query ContentClass:STS_List_DocumentLibrary without additional filters, some document libraries (like “Shared Documents”) are not appearing in search results, even though they exist and contain content. Initial Troubleshooting Steps Taken 1. Hidden Site-Level Visibility Setting Action: Visited https://<your-site>/_layouts/srchvis.aspx and enabled “Always index all Web Parts on this site” Status: ✅ Enabled - Monitoring for 24-48 hours to see if this resolves the issue Result: No effect on bringing the shared documents search result