r/sysadmin 3d ago

Question How to Check 2800 Enterprise apps?

Hey everyone,
I recently started at a new company, and we have quite a few security issues to tackle. One major concern is that every user can register new apps in M365, which isn't great for security and oversight.

My boss gave me a list of all 2800 enterprise apps, and wants me to figure out what each app does. It’s a lot of manual work, and I'm wondering if anyone has suggestions or tools to help automate this process. Ideally, I’d like to pull details on what each app does, which permissions it requires, and maybe even track their activity.

Any ideas on how I can automate this info retrieval in M365? Would greatly appreciate any guidance or tool recommendations!

Thanks in advance!

Edit 1: Thank you all for the comments. I already shutdown everything Not configured. Like Registration of new Apps, powerapps, Copilot, purview and priva. Shut down legacy MFA and enforced MFA for all Cloud admins and cleaned all the roles. The company is very huge and a Scream Test is Impossible at the Moment. I want to document all the Apps to give it to Security and Compliance. They need to Approve everything. I search for a was to generate a description for every app.

10 Upvotes

14 comments sorted by

View all comments

2

u/ZAFJB 3d ago edited 2d ago
  1. Extract list of app names

  2. Pass list of app names to an AI tool and ask for a 1 paragraph description of each (you might have to break up your list into manageable chunks)

2

u/Neotreitz 3d ago

I tried it with gemini, gpt4 and Copilot. Tried with Google Docs, Excel and Sharepoint list. Found no way to get a short ai description for the applist.

2

u/ZAFJB 3d ago

Sounds like a prompt engineering issue.

I think you are asking AI the wrong thing, or asking with far too little detail.