Microsoft Graph

On November 3, 2026, Microsoft retired the memberOf rule operator in Microsoft Entra ID. The operator spent years in public preview with a clear “not for production” label, and plenty of tenants built access, licensing and Conditional Access on top of it anyway. Two days later, the useful question is no longer what Microsoft announced. It is this: what in my tenant is frozen right now, and who has the wrong access because of it? ...

What it does Connects to Microsoft Graph and audits all enabled users in the tenant. For each user it checks registered authentication methods and identifies anyone with no MFA method registered — only the default password method. Results are exported to a timestamped CSV at C:\Temp\UsersWithoutMFA_YYYYMMDD_HHMMSS.csv. Useful for: Identifying MFA gaps before enforcing Conditional Access policies Periodic compliance audits on authentication posture Reporting to management on MFA adoption across the tenant Requirements Module: Microsoft.Graph ...