logologo
AboutResumeProjectsField Notes

© 2026 Beretests. All rights reserved.

← Back to projects
Azure & Microsoft 365Professional case study

Professional project

Microsoft 365 Governance & Access Review Platform

Platform engineer and solution designer

Designed an administration platform that brings Teams and SharePoint inventory, governance indicators, reports and access reviews into one Teams-aware experience for administrators.

Microsoft TeamsSharePoint OnlineMicrosoft GraphAzure FunctionsAzure AutomationManaged IdentityReactAzure DevOps
Confidentiality: This case study is intentionally anonymized. Organization names, tenant identifiers, source code, screenshots and security-sensitive implementation details are not published.

What the work delivered

01

Centralizes visibility into Teams and SharePoint ownership, membership and governance risks

02

Supports owner-led access review decisions with auditable records

03

Reduces the need for administrators to assemble governance information manually across tools

Goals

  • Identify Teams and sites with low or missing ownership and membership
  • Present interactive inventory, dashboards and reports in one application
  • Support repeatable access reviews and remediation through Microsoft Graph

Key design decisions

  • Used Teams SSO for a familiar, tenant-integrated administrator experience
  • Separated interactive APIs from scheduled inventory collection
  • Used managed identities for app-only Microsoft Graph and SharePoint access
  • Prevented overlapping background runs to control cost and protect tenant services

Challenges and solutions

Cross-service inventory correlation

Resolved Graph composite site identifiers and correlated site activity, Microsoft 365 groups, owners and members into a consistent inventory model.

Least-privilege automation

Separated runtime identities and documented the Graph and SharePoint permissions required by each workload.

Key learnings

  • Designing tenant-wide inventory jobs for resilience and predictable cost
  • Balancing governance coverage with app-only least-privilege access
  • Making complex Microsoft 365 relationships understandable to administrators