sapio365 v4 History

What’s new in the latest version?

IMPORTANT – Updates to sapio365 sessions may impact how you use sapio365!
Learn more about updating sapio365.

• We’ve created a new enterprise application to handle new permissions required for PIM management. So, for full functionality, a Global Admin will need to provide one-time Global Admin consent to the enterprise application ‘Ytria sapio365 – with Admin Consent (3.3)’. If a Global Admin is not available to give consent, sapio365 will fall back to the previous version. This must also be provided when connecting with any additional tenants via Partner Access.

Using Collaboration?

• If you are using the Collaboration feature of sapio365, be sure that a Global Admin, or a sapio365 General Manager role holder does their upgrade first. Otherwise, collaboration sync will pause until this is performed.

New features

• Added the ability to connect a sapio365 session to multiple on-premises Domain Connections to retrieve and manage their data.
• Added ability to activate and deactivate eligible Privileged Identity (PIM) roles directly in sapio365.
• Added option for certificate-based sessions which enables the use of sapio365 features requiring Exchange PowerShell without prompting the user to sign-in. This also allows you to schedule automations using these features in elevated sessions, app sessions and RBAC credentials.
• Refreshed the design and enhanced the functionality of the Data Viewer and major dialogs (sessions, filters, RBAC, comments, etc).
• Added the ability to apply column filters, sorting, formatting and more directly from the Data Viewer, plus a new section that clearly displays which filters are currently applied in the view.
• Added MFA to the sapio365 application Master password for enhanced security.
• Added ‘China operated by 21Vianet’ to the list of supported cloud deployments, alongside GCC High and DoD. This option requires a special license.
• Added MariaDB as a storage option for collaboration data and shared cache, with the shared cache also able to reside in any custom local folder.
• Added the ability to list instances of recurrent calendar events.
• Added the Microsoft 365 Copilot User Count Trend usage report.

Users

• Added the ability to edit the list of sponsors for selected guests.
• Improved updating cloud user accounts from a file by adding basic properties ‘Preferred Data Location’, ‘Age Group’ and ‘Consent Provided For Minor’ to the fields list.
• Improved on-premises user editing which now lets you clear any existing Account Expiration Date.
• Improved updating users’ manager on-premises by moving this feature from the edition dialog to the ribbon button ‘Set Manager’.
• Removed ‘Sign-ins’ option from Load additional Info since this information is handled more effectively by the ‘Last Sign-in’ (for all users) feature.
• Fixed cache refresh issue where some users were shown as User (partial data) Object Type and enabled ‘Load Additional’ info on them if needed.
• Fixed issue where ‘Authentication Methods Overview’ data was partially missing in the grid if loaded without ‘Authentication Methods Details’.
• Fixed issue where ‘Authentication Methods Overview’ data was partially lost when loading another set of additional info data or when making an unrelated change.
• Fixed issue where during the creation of a user on-premises using a template, changing the set OU was not saved.
• Fixed refresh issue where saving an applied ‘Revoke Session Tokens’ action resulted in a lingering ‘…revoke pending…’ status.
• Fixed ‘Set Manager’ dialog which was missing the list of users that were selected.
• Fixed issue where editing users was not functioning when combining multi-value explosion and filtering.
• Improved MFA authentication information by adding grid property columns specific to the QR code authentication method type.
• Removed deprecated ‘User Info :: Refresh tokens, session cookies valid from’ column.

Groups

• Added the ability to retrieve and manage authorized mail senders for distribution lists and mail-enabled security groups with the ‘Delivery Management’ button and submodule.
• Added ‘Channel Count’ to the list of Additional Info loading options to retrieve the number of channels (All, Internal and External) for selected Teams.
• Added the ability to update the list of email aliases of Microsoft 365 groups.
• Improved Group Members submodule by retrieving devices that are members of the groups.
• Improved M365 group creation with behaviour options including disabling a welcome email to new members.
• Improved data loading process by disabling irrelevant features and buttons for non-M365 groups.
• Improved group creation dialog with a ‘Mandatory Information’ category.
• Improved group submodules with the addition of a calculated column ‘Organization Unit’ wherever there is a ‘Distinguished Name’ property available.
• Improved on-prem group members submodule with the addition of the ‘Enabled’ property for group members.
• Added the ability to directly add missing members resulting from a comparator analysis with the ‘Add to’ function.
• Fixed issue importing groups on-premises where the designated OU was not saved.
• Fixed cause of row duplication when saving the addition of members or owners in the Group members module.
• Fixed issue where creating a group always prefills the ‘Security Enabled’ property as unset regardless of the selected template group.
• Fixed issue where some members of synced groups were displayed with ‘cloud’ sync status in the Group Members submodule.
• Fixed issue where during the creation of a M365 group, the owner that is set in the dialog is not added to the group.
• Fixed issue where during the creation of a group on-premises using a template, changing the set OU was not saved.

Miscellaneous general fixes and improvements

• Changed Exchange PowerShell minimum requirement to 3.9.
• Added the ability to apply conditional colour formatting on a column for values that meet a set criteria.
• Improved Audit Logs report with new filters and removed nonfunctional filter options.
• Improved grid Comments dialog in general, and you can now add column titles and comment titles during creation, as well as reuse previous values when creating new comments.
• Improved Comment management by letting you delete comments at all levels directly from the grid, which removes the entire comment column when cleared.
• Improved Files submodules with the option to load only first-level files.
• Improved ‘Copy To’ feature in Files submodules with the option to include version history.
• Improved the values filter with the option to view visible rows only.
• Improved the Graph API Usage report with properties from Service Principals as ‘Extra Info from cache’, enriching the report and helping identify applications.
• Improved sapio365 RBAC credentials configuration with an option to omit the use of a service account.
• Improved management of RBAC credentials with an option to change the password renewal frequency.
• Improved collaboration options ‘See current SQL Server database information’ and ‘Force a resynchronization’ by making them available without a subscription code.
• Improved Devices module with the addition of two URL columns ‘Intune URL’ and ‘Microsoft Azure portal URL’.
• Improved Restore Points and Snapshots by disabling non-functional features to create or save a view.
• Improved column settings with option to always auto-explode muti-values.
• Improved the Dashboard by enabling to run Scheduled Tasks directly from there.
• Improved Data Viewer on the right side with 2 copy-to-clipboard shortcuts: Ctrl + Click will copy the value and Alt + Click will copy the column ID.
• Improved messages when loading views that require loading of on-premises information.
• Renamed Business Reports as Summary Reports.
• Improved managing permissions in Files modules and deleting attachments in Messages and Events modules with the addition of specific ‘Status’ column values. Edits or deletions applied to a specific type of object are now clearer.
• Improved handling of license unit cost rights by non-admins without collaboration. Non-admins were previously not able to set a unit cost in the Licenses and service plans module.
• Improved Snapshot and offline Freeze Point session by disabling the buttons for the creation or update of views.
• Improved loading owners in Registered Applications module by handling app owners that are service principals.
• Improved the ‘Copilot Activity Overview’ Summary Report with text clarification.
• Improved ‘Load Status – Attachment Info last queried’ to show date and time in Events, Messages, and Group Conversation Posts.
• Improved RBAC configuration with new scopes, and all scopes are now listed alphabetically for easier navigation.
• Fixed an RBAC issue where renaming a multi-credential role did not update the delegated user’s session name to match the new credential name.
• Fixed issue where sessions using certificate-based authentication were being automatically signed out every hour.
• Fixed regression in Sites modules where library storage info columns were not associated to each library (shown as multi-values).
• Fixed Quick GridView for Sites where the Apply button was disabled for Additional Info options.
• Fixed issue where moving between different types of usage reports options sometimes resulted in no time range selected. Now, the first option is selected by default in these cases.
• Fixed crash issue when signing out of a loaded Freeze Point. Fixed issue where, during app session creation or elevating a session, creating a new app prompted users to delete the newly created app instead of properly replacing the existing one.
• Fixed issue where creating a session with the same credentials as the currently loaded session led to the a buggy state.
• Fixed issue in Audit Logs where ‘Refresh’ unexploded multi-values that were already exploded in the view.
• Fixed issue where data with an outdated delta prevented the cache from refreshing correctly, and addressed a problem where no view was applied after reloading from an old cache.
• Fixed editing time issue in Calendar Events where applying the local time value set from the dialog did not match the value shown in the grid.
• Fixed issue where set time filters were not properly applied in saved views.
• Fixed issue in Messages and Events modules where “Click ‘Load Attachment Info’ button (Ctrl-L) to load this property value for selected rows.” text was shown for rows where there are no attachments and for rows whose attachments were loaded.
• Fixed issue in Service Principals module where clicking ‘Show in a new window’ for selected Applications opened in the same frame.
• Fixed issue where Comment columns where shown under a ‘ghost category’ in the grid.
• Fixed issue where sapio365 prompted for the master password either at the end of a scheduled job run, or after running an edited scheduled job, even when it hadn’t previously required it.
• Fixed regression where the tooltip of link properties (URL) was no longer showing the actual link address.
• Fixed issue with the sapio365 update notice shown in the dashboard but not in the backstage.

Automation

• Added new automation tags and fixed various automation issues, listed in our help documentation: https://docs.ytria.com/automation/sapio365-latest-automation-additions.