Tibo Hulens

M365 / Security Engineer. I write PowerShell so I don’t have to click through the Entra portal 300 times.

I’m Tibo Hulens, an M365 and security engineer based in Belgium. My day job is identity and access: Entra ID, Entitlement Management, PIM, access reviews and the governance around them.

This blog exists because I keep running into the same thing: something is perfectly possible in Entra ID, but the portal makes you click through it 300 times, and the official documentation stops one step short of a working example. So I write the script, and then I write it up here.

What you’ll find here

  • Access Packages and Entitlement Management - reporting, assignment requests, approval flows, and the gaps in the built-in tooling.
  • Microsoft Graph with PowerShell - working examples with the exact permissions and app registration setup you need, including the beta endpoints where v1.0 doesn’t cover it yet.
  • Reporting that people can actually use - usually meaning “export it to Excel so someone can filter it”.

Every script in a post is also on GitHub in TiboPowershell/PowershellScripts, so you can grab it without reading the whole article.

Get in touch

Found a bug, a better approach, or something Microsoft has since fixed? Let me know on LinkedIn or open an issue on GitHub.