Questions[microsoft-graph](server)

I need to update email address domain for all Azure AD Groups (of all types Unified, Dynamic ... ) and I am using PowerShell 7 with latest stable AzureAD module.

I have an issue with setting new value to "Mail" and "ProxyAddresses" properties using Set-AzureADMSGroup cmdlet. Can somebody help / provide information or example on how to correctly set those properties, since documentation is not clear for this. https://docs.microsoft.com/en-us/powershell/module/azuread/set-azureadmsgroup?view=azureadps-2.0

In case this is not possible with this cmdlet, then I need to use Exchange Online Powershell to manage all groups via seperated cmdlet regarding the GroupTypes ?

Import-Module AzureAD -UseWindowsPowerShell
Connect-AzureAD

$AzureADMSGroups = Get-AzureADMSGroup -All:$true -Filter "mail ge ' '"

foreach ($AzureADGroup in $AzureADGroups) {
    $newMail = $AzureADGroup.Mail.Replace('olddomain.com','newdomain.com')
    $AzureADGroup | Set-AzureADMSGroup -Replace @(Mail = $newMail } }
}

Error which I have is that -Replace parametar is not found. I also tried:

$AzureADGroup.Mail = $newMail
$AzureADGroup | Set-AzureADMSGroup

Which does not throw any output or error, but value is not changed in Azure AD. I also need to update ProxyAddresses field/property in the same way.

Microsoft has made anonymous display of user-names as default in Office 365 and also enforced it from August 31, 2021. I found a way to overcome it from Admin Portal. https://docs.microsoft.com/en-us/office365/troubleshoot/miscellaneous/reports-show-anonymous-user-name

I want to update this setting using PowerShell or Graph. As far as I have checked, there is no method found. Has anyone found any solution for it.

This link talks about it but it is two years old: https://answers.microsoft.com/en-us/msoffice/forum/all/anonymous-reporting-in-office-365/65e9e96f-fb04-4563-9961-e56a1fa8181d

While creating user using microsoft graph,it was working fine yesterday but now I am getting the error below. I re-activated the subscription.

   "error": {
        "code": "Directory_ReplicaUnavailable",
        "message": "The preferred replica is unavailable. Please retry your request.",
        "innerError": {
            "request-id": "19030bd0-0aad-49cf-9d40-6fcb7fb4360e",
            "date": "2020-05-08T14:35:45"
        }
    }

My goal from a high level:

I would like automatically copy all emails in a conversation from the various mailboxes where they reside to a single mailbox to act as an archive. This would basically happen one at a time. So in practice, an admin/analyst receives an email thats part of a conversation that they deem necessary to archive and they execute a process that gathers all of those emails and copies them to a separate mailbox.

My idea so far:

Im thinking that the best way to do this is:

1. Create a mailbox that only a group of analysts can send emails to
2. When analysts receive a candidate email, they forward this to the mailbox mentioned in #1
3. Whenever an email arrives in this mailbox, automation executes to copy the conversation history of the email chain from all source mailboxes.

My question:

I'm most uncertain about #3. I know there are several ways I can do this but don't know which approach may yield the best results:

1. Use Exchange Web Services? This seems to be a well established approach over the years but my understanding is that Microsoft wants people to stop using EWS and move on to Microsoft Graph.
2. Microsoft Graph? This seems to be what Microsoft recommends but is Microsoft Graph established enough to do what I want to do?
3. Azure runbook? If this approach reasonable mainly for a PowerShell based solution? If so, it seems I would be stuck with using Compliance Center commandlets. Ive used those quite a bit and have frequently run up against limitations especially in regards to copying emails(it seems this can only be done by exporting PSTs).

Im basically just looking for someone to steer me in the right direction. Someone who's done something similar with Graph, EWS or Azure automation. I haven't used Graph or EWS extensively to know which would make more sense. I would like to avoid going too far down one option only to hit a brick wall limitation like I did with Compliance Center commandlets.

EDIT: Some more explanation on the trouble I had with Compliance Center commmandlets:

1. copying emails is a problem. You can export results, but it's to a PST and I didn't see a way to do this via script, only via the web interface. Search-Mailbox works ok in this regard, but it has it's own problems(the commandlet is getting retired in another couple months)
2. Searching by Conversation ID doesn't seem be possible in Content Search KQL. Which leaves me with setting up complex custom searches in every situation to find all emails.(unless you know an easier way to find all emails in a conversation?)
3. Ill think of some more reasons if necessary.

Background: We have a linux based robotic application (in LISP language) to read application support mailbox and respond appropriately to customer emails. Currently the mail reading is done using the IMAP access protocol. As per new security policy we need to use Microsoft Graph APIs to access/read our application mail-box.

We need to use "resource owner password credential" approach as we do not have any web.

We could not use "Delegated permissions" as our application can not be the signed in user.

We wanted to use "Application permissions" like "Mail.ReadWrite" & "Mail.Send". But these application permissions would give access to all the mail-boxes in the organization.

So my question is, can my administrator provide "Admin Consent" such that my application can access one mail-box alone?