sapio365 v4 History

What’s new in the latest version?

New features

• Significantly improved overall grid processing time, from data retrieval to applying filters and other configuration changes, making the grid much faster and more responsive.
• Added a ‘Quick Lookup from cache’ option in the Dashboard to quickly search cached Users, Groups, Sites, and Service Principals.
• Added counts to the Dashboard to show the number of on-premises user accounts and groups in hybrid Active Directory environments.
• Added Visio Activity and Project Activity to Usage Reports, which can now be combined or enriched with cached user properties like other user-based reports.
• Added the ability to turn the Welcome Message setting on or off for selected Microsoft 365 groups and Teams, which controls whether new members automatically receive a customized welcome message.
• Redesigned the license editing dialog for a more modern look and easier use.
• Optimized the retrieval, display, and update of user license assignments, resulting in a lighter grid where service plans are shown only for assigned licenses, greatly reducing grid processing time.
• Added new mailbox statistics properties in the Users and Groups modules. These are retrieved via Mailbox Info and include Total Item Size, Total Deleted Item Size, Item Count, Deleted Item Count, and Last Interaction Time.
• Added the ability to set the retention policy of selected users’ mailboxes.
• Added a new Permission Type (Friendly) column in the Registered Applications module to indicate whether a permission is Delegated or Application.
• Added new columns ‘Key – Additional targets’ and ‘Value – Additional targets’, and improved data loading in the Admin Audit Logs module.
• Added new Service Provisioning Errors columns to the grid for assigned licenses in Users and Groups modules.
• Added the ‘Load All’ button and the ability to add Users, Groups, and Service Principals from the cache or remove them from the grid in their respective Details submodules.

Users

• Improved User Licenses submodule by adding a column Oldest Plan Assigned date to indicate when each license was assigned.
• Improved the OneDrive submodules by displaying aggregate File Count, Folder Count, and Size for each user.
• Improved handling of Microsoft errors when retrieving messages from Recoverable Items folders that previously caused failed request loops. You can now skip the problematic query in the retry dialog and continue retrieving other valid results.
• Improved the edition dialog to indicate when fields cannot be edited because the current selection includes an incompatible user.
• Fixed an issue where edited mailbox properties were not correctly escaped in the generated PowerShell request.
• Fixed an issue where saving on-premises changes for an exploded user account did not work.
• Fixed issues in the Users Details module where a yellow saved state was returned and where Refresh was not handled correctly.

Groups

• Improved the Files submodules by displaying aggregate File Count, Folder Count, and Size for each group, channel or site.
• Improved edition of security groups by hiding the irrelevant section ‘Mail Config’.
• Improved the edition dialog to indicate when fields cannot be edited because the current selection includes an incompatible group.
• Fixed an issue in the Groups grid where applying changes caused the previously loaded Viva Engage value to disappear.
• Fixed issues in the Groups Details module where a yellow saved state was returned and where Refresh was not handled correctly.

Miscellaneous general fixes and improvements

• Improved the Data Viewer by always displaying the list of property columns, even when no grid item is selected, and added a toggle to show fields in either a compact or more spaced-out (normal) layout.
• Improved loading time for Dashboard Apply Filter options for Users, Groups, Sites, and Service Principals by leveraging the cache.
• Improved the dialogs for the ‘Reinitialize’ and ‘Reload’ refresh options and added information about the duration of the previous refresh.
• Improved the Export dialog to show how many rows are selected for export and removed the default selection of ‘Selected rows only’ and ‘Include locked technical columns’.
• Improved how currency symbols are managed in the grid so that when the symbol of a column changes, all referencing columns, including Comments, display the updated symbol.
• Improved the grid processing progress bar styling and added a display of the number of grid rows being processed.
• Improved grid processing time when loading a large Snapshot or Freeze Point.
• Improved on-prem settings for multiple domains by adding a button to reorder connections, with the last connection in the list taking precedence for any overlapping information.
• Improved various message boxes and dialogs by updating them to a more modern, HTML-based design.
• Improved grids in the Sites and Groups modules by consolidating document library quota properties into single-value columns for sites and groups with multiple libraries, since these quotas represent the overall site.
• Improved the use of Snapshots, which can now be loaded without an active sapio365 session as long as there is an activated sapio365 license.
• Improved the password auto-renewal option in the sapio365 RBAC credential creation dialog by adding a 45-day frequency choice and clarifying that sapio365 automatically renews the application client secret at the selected frequency, setting the new secret’s expiration date to twice that interval.
• Improved PowerShell-based functionality by ensuring that PowerShell no longer loads outdated versions of the ExchangeOnlineManagement module.
• Improved the ‘Add Data from file’ feature in general and with the addition of options in the dialog to skip rows, include headers, and information about any merged rows in the imported file.
• Fixed an issue where importing data from Excel into the grid using ‘Add data from file’ incorrectly converted numbers into dates.
• Improved grid display with a ‘Show Grid Entry Viewer’ option that hides the Data Viewer area to maximize grid space, accessible from the right-click menu under Grid Tools & Options – Grid Options.
• Improved dialogs for exploding and unexploding multivalue cells with clearer text.
• Improved the alternate sapio365 license activation process with clearer text and links to the help page in dialogs. Added a warning dialog when enabling the Alternate sapio365 license activation option in Preferences, plus an indicator in the About sapio365 section showing if reactivation is needed via the Refresh Offline Access button.
• Improved the Sites module for elevated, app, and role sessions so that previously empty Description and Last Modified Date properties can now be retrieved using the ‘Load Info’ button.
• Improved the RBAC scope configuration dialog with a smaller scroll window for the scoped property and now require users to explicitly choose a property instead of preselecting the first one by default.
• Improved first-time user session setup by adding an option to copy a link that can be sent to a global admin to obtain consent for the application.
• Fixed a regression where value filter entries starting with capital letters were listed in the value filter dialog before being sorted alphabetically.
• Fixed an issue where applying a view that includes on-prem columns prompted the user to ‘Load on-premises info for this view?’ even when on-prem configuration was not enabled.
• Fixed Future Cutoff-Date/Time criteria when applying a Conditional Format on a column.
• Fixed the behavior of the column with ‘Freeze up to’ applied where increasing its width or resizing the window could make the column unmanageable.
• Fixed an issue with scheduled tasks and reports when Windows was configured to hide known file extensions, which caused the scheduled task path to miss the .exe extension.
• Fixed the ‘Reinitialize’ feature in Service Principals, which was not working.
• Fixed an issue causing mismatched column titles for ‘Transferred columns’, which enrich the Users and Groups submodules as well as Usage reports.
• Fixed an issue where changing the sapio365 license capacity multiple times showed an incorrect preview of increased capacity costs unless sapio365 was restarted.
• Fixed an issue where hierarchy count columns were not correctly updated when hiding children.
• Fixed an issue where, when several columns of the same column family were grouped, ungrouping one column incorrectly displayed the ‘Confirm unexplode’ dialog.
• Fixed an issue with alternate sapio365 license activation where canceling Refresh license exited the application instead of falling back to Lite mode.
• Fixed an issue where the multivalue status was not refreshed when an entry’s multivalue property was updated with an additional value.
• Fixed an issue where Conditional Format was not applied to non-text multivalues, such as unexploded date and number multivalues.
• Fixed issue where deleting a Comment that had been exploded into multiple rows now correctly removes all associated exploded rows from the grid.
• Fixed an issue where exploding another multivalue column in a view that already had a first multivalue exploded resulted in duplicate rows.
• Fixed an issue where canceling the explosion of a new multivalue, when another multivalue was already exploded in the grid, caused the cancel button not to work.
• Fixed a crash that occurred when cancelling a multivalue explosion and when deleting an entry while it was expanded across multiple rows.
• Fixed issue where it was not possible to edit a Column comment that was in a saved View.
• Fixed an issue where multivalue comments that were part of a column family could not be removed.
• Fixed an issue where the grid did not display the comment value for an exploded multivalue Column Comment while the Comment edit dialog was open to update that comment.
• Fixed an issue where changes to a multivalue comment were not reflected in the grid while it was exploded.
• Fixed an issue where multivalue comments were not exploded when a view saved with exploded comments was applied, requiring the view to be reapplied to explode the comments.
• Fixed an issue where applying a view that requires loading on-prem data resulted in incorrect grid category headers.
• Fixed an issue where sapio365 could freeze if a recent Partner session failed to load.
• Fixed sapio365 RBAC scopes by removing non-functional scope properties such as dates, booleans, and multivalues.
• Fixed issue where a user with a sapio365 RBAC role was not able to enable ‘Load On-Premises’ functionality for their session.
• Fixed issue where a user with only one assigned sapio365 RBAC role was not able to remove the role to go back to a regular user session.
• Fixed a regression in the Service Principals module where loading Custom Security Attributes for a Service Principal with no results failed to display an empty grey cell.
• Fixed an issue where canceling an automatic job triggered a cancel progress dialog in an open sapio365 module (Freeze Point), which previously required closing the module to clear.
• Fixed a crash that occurred when sapio365 was throttled while copying files to another drive.
• Fixed a crash that occurred when performing a ‘Starts with…’ quick search in a grid with no visible rows.
• Fixed a regression that caused a crash when loading Admin Audit Logs.
• Fixed a regression affecting RBAC roles created before version 4.0 that caused a sync error with the message ‘Unable to store record, missing value, no default for DelegationPrivileges’.
• Fixed a regression that caused sapio365 to freeze when the connection to MariaDB could not be established.
• Fixed issue causing the error ‘Error while deleting tables’ when purging MariaDB and MySQL server databases.
• Fixed a shared cache issue on MariaDB and MySQL server databases that caused errors when certain unicode characters like emojis were not handled properly.
• Fixed the cause of the error ‘An error occurred with the data storage SQL ERROR’ when loading a session.

Miscellaneous general fixes and improvements

IMPORTANT – We’ve made some important updates to how sapio365 connects to your on-premises Active Directory environment.

In version 4.0, sapio365 briefly used Invoke-Command to call Get-ADDomainController for Active Directory (AD) connections. This required extra permissions that some users didn’t have. We’ve now reverted to using Active Directory Web Services (ADWS) for on-premises data access. This change means you no longer need additional permissions to connect to AD.

The only feature that still uses Invoke-Command is Force Sync, just as before.

New features and improvements

• Added support for editing user and group on-premises attributes extensionAttribute1 through extensionAttribute15 in each module’s edition dialog.
• Added the ability to load additional files and folders for selected folders, with an option to load only first-level items.
• Added MySQL as a supported SQL database option for storing collaboration data and shared cache.
• Added an alternate activation option for new sapio365 licenses when online activation is unavailable.
• Improved Files modules by adding a Direct child count column to show the number of direct items in a folder.
• Improved Files modules by replacing the separate Total Size and File Size columns with a single column to align with Graph API changes and avoid incorrect calculated values.
• Improved Summary Reports by adding a consolidated view of all saved summary report snapshots, independent of the current selection.
• Improved querying of Admin Audit Logs with new filter options and removed nonfunctional filters.
• Improved comment management by displaying the title of the column referenced by each comment in the Comment History grid.

Miscellaneous general fixes

• Fixed a regression where the value for ‘User ID – Initiated by’ was not displayed in Admin Audit Logs.
• Fixed a regression where a Past/Future CutOff Date/Time filter saved in a View was not applied in a Freeze Point.
• Fixed a regression where sapio365 froze when the connection to MariaDB could not be established.
• Fixed a regression that prevented creating a password-protected Freeze Point.
• Fixed a regression where some information was not displayed at the bottom of the About sapio365 section.

Miscellaneous general fixes and improvements

• Improved Admin Audit Logs by adding more filter options and removing nonfunctional ones.
• Improved getting users’ chats by handle paginated results.
• Improved MariaDB text columns by making them accent-sensitive.
• Improved the Users, Groups, and Service Principals by adding a Last Updated column that shows when entry data was last retrieved from the server, whether via Additional Info loading or Refresh (delta).
• Fixed an inconsistency in on-prem domain connection status that caused Freeze Points and Snapshots to incorrectly show no domain connection during login.
• Fixed an issue where on-prem columns were not displayed in the grid after applying a View that included and loaded them.
• Fixed missing icon for transferred ‘Sign-in status’ user property column in Chats.
• Fixed regression in Messages where editing an email was disabled.
• Fixed regression which resulted in the inability to edit or create a sapio365 RBAC role.
• Fixed the default SQL Server port number used when configuring the MariaDB connection for shared cache in RBAC credentials.

What’s new in the latest version?

IMPORTANT – Updates to sapio365 sessions may impact how you use sapio365!
Learn more about updating sapio365.

• We’ve created a new enterprise application to handle new permissions required for PIM management. So, for full functionality, a Global Admin will need to provide one-time Global Admin consent to the enterprise application ‘Ytria sapio365 – with Admin Consent (3.3)’. If a Global Admin is not available to give consent, sapio365 will fall back to the previous version. This must also be provided when connecting with any additional tenants via Partner Access.

Using Collaboration?

• If you are using the Collaboration feature of sapio365, be sure that a Global Admin, or a sapio365 General Manager role holder does their upgrade first. Otherwise, collaboration sync will pause until this is performed.

New features

• Added the ability to connect a sapio365 session to multiple on-premises Domain Connections to retrieve and manage their data.
• Added ability to activate and deactivate eligible Privileged Identity (PIM) roles directly in sapio365.
• Added option for certificate-based sessions which enables the use of sapio365 features requiring Exchange PowerShell without prompting the user to sign-in. This also allows you to schedule automations using these features in elevated sessions, app sessions and RBAC credentials.
• Refreshed the design and enhanced the functionality of the Data Viewer and major dialogs (sessions, filters, RBAC, comments, etc).
• Added the ability to apply column filters, sorting, formatting and more directly from the Data Viewer, plus a new section that clearly displays which filters are currently applied in the view.
• Added MFA to the sapio365 application Master password for enhanced security.
• Added ‘China operated by 21Vianet’ to the list of supported cloud deployments, alongside GCC High and DoD. This option requires a special license.
• Added MariaDB as a storage option for collaboration data and shared cache, with the shared cache also able to reside in any custom local folder.
• Added the ability to list instances of recurrent calendar events.
• Added the Microsoft 365 Copilot User Count Trend usage report.

Users

• Added the ability to edit the list of sponsors for selected guests.
• Improved updating cloud user accounts from a file by adding basic properties ‘Preferred Data Location’, ‘Age Group’ and ‘Consent Provided For Minor’ to the fields list.
• Improved on-premises user editing which now lets you clear any existing Account Expiration Date.
• Improved updating users’ manager on-premises by moving this feature from the edition dialog to the ribbon button ‘Set Manager’.
• Removed ‘Sign-ins’ option from Load additional Info since this information is handled more effectively by the ‘Last Sign-in’ (for all users) feature.
• Fixed cache refresh issue where some users were shown as User (partial data) Object Type and enabled ‘Load Additional’ info on them if needed.
• Fixed issue where ‘Authentication Methods Overview’ data was partially missing in the grid if loaded without ‘Authentication Methods Details’.
• Fixed issue where ‘Authentication Methods Overview’ data was partially lost when loading another set of additional info data or when making an unrelated change.
• Fixed issue where during the creation of a user on-premises using a template, changing the set OU was not saved.
• Fixed refresh issue where saving an applied ‘Revoke Session Tokens’ action resulted in a lingering ‘…revoke pending…’ status.
• Fixed ‘Set Manager’ dialog which was missing the list of users that were selected.
• Fixed issue where editing users was not functioning when combining multi-value explosion and filtering.
• Improved MFA authentication information by adding grid property columns specific to the QR code authentication method type.
• Removed deprecated ‘User Info :: Refresh tokens, session cookies valid from’ column.

Groups

• Added the ability to retrieve and manage authorized mail senders for distribution lists and mail-enabled security groups with the ‘Delivery Management’ button and submodule.
• Added ‘Channel Count’ to the list of Additional Info loading options to retrieve the number of channels (All, Internal and External) for selected Teams.
• Added the ability to update the list of email aliases of Microsoft 365 groups.
• Improved Group Members submodule by retrieving devices that are members of the groups.
• Improved M365 group creation with behaviour options including disabling a welcome email to new members.
• Improved data loading process by disabling irrelevant features and buttons for non-M365 groups.
• Improved group creation dialog with a ‘Mandatory Information’ category.
• Improved group submodules with the addition of a calculated column ‘Organization Unit’ wherever there is a ‘Distinguished Name’ property available.
• Improved on-prem group members submodule with the addition of the ‘Enabled’ property for group members.
• Added the ability to directly add missing members resulting from a comparator analysis with the ‘Add to’ function.
• Fixed issue importing groups on-premises where the designated OU was not saved.
• Fixed cause of row duplication when saving the addition of members or owners in the Group members module.
• Fixed issue where creating a group always prefills the ‘Security Enabled’ property as unset regardless of the selected template group.
• Fixed issue where some members of synced groups were displayed with ‘cloud’ sync status in the Group Members submodule.
• Fixed issue where during the creation of a M365 group, the owner that is set in the dialog is not added to the group.
• Fixed issue where during the creation of a group on-premises using a template, changing the set OU was not saved.

Miscellaneous general fixes and improvements

• Changed Exchange PowerShell minimum requirement to 3.9.
• Added the ability to apply conditional colour formatting on a column for values that meet a set criteria.
• Improved Audit Logs report with new filters and removed nonfunctional filter options.
• Improved grid Comments dialog in general, and you can now add column titles and comment titles during creation, as well as reuse previous values when creating new comments.
• Improved Comment management by letting you delete comments at all levels directly from the grid, which removes the entire comment column when cleared.
• Improved Files submodules with the option to load only first-level files.
• Improved ‘Copy To’ feature in Files submodules with the option to include version history.
• Improved the values filter with the option to view visible rows only.
• Improved the Graph API Usage report with properties from Service Principals as ‘Extra Info from cache’, enriching the report and helping identify applications.
• Improved sapio365 RBAC credentials configuration with an option to omit the use of a service account.
• Improved management of RBAC credentials with an option to change the password renewal frequency.
• Improved collaboration options ‘See current SQL Server database information’ and ‘Force a resynchronization’ by making them available without a subscription code.
• Improved Devices module with the addition of two URL columns ‘Intune URL’ and ‘Microsoft Azure portal URL’.
• Improved Restore Points and Snapshots by disabling non-functional features to create or save a view.
• Improved column settings with option to always auto-explode muti-values.
• Improved the Dashboard by enabling to run Scheduled Tasks directly from there.
• Improved Data Viewer on the right side with 2 copy-to-clipboard shortcuts: Ctrl + Click will copy the value and Alt + Click will copy the column ID.
• Improved messages when loading views that require loading of on-premises information.
• Renamed Business Reports as Summary Reports.
• Improved managing permissions in Files modules and deleting attachments in Messages and Events modules with the addition of specific ‘Status’ column values. Edits or deletions applied to a specific type of object are now clearer.
• Improved handling of license unit cost rights by non-admins without collaboration. Non-admins were previously not able to set a unit cost in the Licenses and service plans module.
• Improved Snapshot and offline Freeze Point session by disabling the buttons for the creation or update of views.
• Improved loading owners in Registered Applications module by handling app owners that are service principals.
• Improved the ‘Copilot Activity Overview’ Summary Report with text clarification.
• Improved ‘Load Status – Attachment Info last queried’ to show date and time in Events, Messages, and Group Conversation Posts.
• Improved RBAC configuration with new scopes, and all scopes are now listed alphabetically for easier navigation.
• Fixed an RBAC issue where renaming a multi-credential role did not update the delegated user’s session name to match the new credential name.
• Fixed issue where sessions using certificate-based authentication were being automatically signed out every hour.
• Fixed regression in Sites modules where library storage info columns were not associated to each library (shown as multi-values).
• Fixed Quick GridView for Sites where the Apply button was disabled for Additional Info options.
• Fixed issue where moving between different types of usage reports options sometimes resulted in no time range selected. Now, the first option is selected by default in these cases.
• Fixed crash issue when signing out of a loaded Freeze Point. Fixed issue where, during app session creation or elevating a session, creating a new app prompted users to delete the newly created app instead of properly replacing the existing one.
• Fixed issue where creating a session with the same credentials as the currently loaded session led to the a buggy state.
• Fixed issue in Audit Logs where ‘Refresh’ unexploded multi-values that were already exploded in the view.
• Fixed issue where data with an outdated delta prevented the cache from refreshing correctly, and addressed a problem where no view was applied after reloading from an old cache.
• Fixed editing time issue in Calendar Events where applying the local time value set from the dialog did not match the value shown in the grid.
• Fixed issue where set time filters were not properly applied in saved views.
• Fixed issue in Messages and Events modules where “Click ‘Load Attachment Info’ button (Ctrl-L) to load this property value for selected rows.” text was shown for rows where there are no attachments and for rows whose attachments were loaded.
• Fixed issue in Service Principals module where clicking ‘Show in a new window’ for selected Applications opened in the same frame.
• Fixed issue where Comment columns where shown under a ‘ghost category’ in the grid.
• Fixed issue where sapio365 prompted for the master password either at the end of a scheduled job run, or after running an edited scheduled job, even when it hadn’t previously required it.
• Fixed regression where the tooltip of link properties (URL) was no longer showing the actual link address.
• Fixed issue with the sapio365 update notice shown in the dashboard but not in the backstage.

Automation

• Added new automation tags and fixed various automation issues, listed in our help documentation: https://docs.ytria.com/automation/sapio365-latest-automation-additions.