5 releases 90 tags

RSS feed

• v10.1.0 2875b2b1a0

  Compare

  v10.1.0 Stable

  kerem released this 2026-02-20 19:58:57 +03:00 | 680 commits to main since this release

  📅 Originally published on GitHub: Fri, 20 Feb 2026 17:34:11 GMT
  🏷️ Git tag created: Fri, 20 Feb 2026 16:58:57 GMT

  I kissed a dog and I liked it

  We've had some amazing times in the last couple of weeks; most of our team was at Right of Boom this month and we launched our first official CIPP training there. Seeing all the people that came to visit our booth and training was amazing; we had about 180 people following our session and teaching them about CIPP, about M365, about why Microsoft made specific choices and so much more.

  Remember that this was only the first of many; our CIPP certification is coming to a location near you soon. Completely free M365 education brought to you from an MSP perspective. No funneling, no wanting you to buy products, just pure education.

  Lets make ourselves a new cocktail The Bulldog Smash and look at the changes.

  Custom Intune Application?! Oh my.

  So for the longest time one of the requests we've had was "How can we add our own Intune Applications into CIPP?" and we had to find a way to make it possible. One of our contributors tried creating a custom app builder but it turned out to be pretty hard to use that with our infrastructure. Instead, we've chosen for a more industry standard solution: PowerShell. you can now add any Intune app, template it, and deploy it across all your tenants easily.

  We're also adding templating, and an entire curated catalogue of applications for everyone to use in the next release. Want to check out how it looks? Here's a screenshot

  

  BPA deprecation & log Retention Policies

  So as we announced previously, we're deprecating BPA in favour of our tests - Tests are the replacement for custom BPA reports as they'll allow you to collect more information. We've created a new option under the settings menu to re-enabled BPA for if you're still using it, while being aware we're removing it in a later version.

  You've also asked us to allow you to retain LESS of the logs, because of organizational reasons. We've introduced a settings menu to allow you to set a logbook retention policy.

  Better GDAP and Direct Tenant onboarding

  One of the comments in our Discord triggered us to look long and hard at tenant onboarding; the biggest complaint was that it was a lot of places you had to jump to, another was that people forgot to follow the instructions in our docs so we've tried to dive a bit more into how people think and do more actions for you.

  So, onboarding has received quite a facelift. If you want to see it, we have a couple of storylanes for you to check here:

  Executing the CIPP Setup Wizard First Time Setup → https://app.storylane.io/share/vxdbaztterzq
  Adding a GDAP Tenant via the Setup Wizard → https://app.storylane.io/share/p6cyd3t8w8ru
  Adding a Direct Tenant via the Setup Wizard → https://app.storylane.io/share/kcszcpgdcg6m

  Graph Explorer

  We've also upgraded our Graph Explorer, more functionality, more badass reports, and prettification:https://app.storylane.io/share/p0ljufhpgkmb

  Universal Search returns

  With the hard work of @rvdwegen we've made our universal search box on the dashboard come back. This now searches the entire database for users or groups so you can easily jump to the overview for these.

  And so much more:

  We've added:

  • View group page to the Groups section
  • View device page to the Intune section
  • DB manual refresh section in settings
  • Graph Explorer UX improvements
  • Universal search (DB-backed)
  • Win32 PowerShell app creation flow
  • Feature flags for opt-in BPA collection
  • Log retention policy (90-day default)
  • Scheduler backoff and retry for rate limits
  • Office Apps Licensing in PhishProtection Standard
  • MFA report improvements for internal guests
  • Ease of GDAP onboarding improvements
  • Docs/guidance on migrating CSP tenant in CIPP
  • Reuseable Intune settings by @MWG-Logan

  We've fixed

  • Offboarding Wizard Step 3: user lists not refreshing on tenant switch (stale React Query cache key)
  • Offboarding reruns not working correctly
  • Custom roles preventing Chocolatey app deployment
  • NinjaOne/Hudu Device Sync issues
  • SAM user not being auto-added to GDAP groups during onboarding
  • Exchange user forwarding detection ambiguous with duplicate display names
  • Exchange info card render issue
  • Scripted alert errors creating excessive noise
  • Group template deployment missing alias validation
  • Conditional Access template import dropping uploads
  • Azure PowerShell onboarding blocked by error 50199
  • App approval templates missing default delegated scopes
  • DKIM rotate standard not updating both selectors
  • Standards save dialog saying 'every 3 hours' when backend runs every 4 hours
  • Manual remediation failures
  • Bug with bulk drift remediation actions payload

  We've improved

  • Exchange calendar permissions now served via cache
  • DomainAnalyser pulls domains from DB instead of Graph
  • Intune standard runtime overhaul
  • Adjusted Exchange org management role check threshold
  • Renamed 'Classic' to 'Standards' for clearer Standards vs Drift messaging
  • Removed Quad9 DNS option
  • Refactored Backup Engine (New-CIPPBackup → New-CIPPBackupTask)
  • Refactored Drift Management Alignment Engine
  • Refactored NinjaOne Synchronization Pipeline
  • Clarified Group Template Username requirements
  • Fixed standards timing inconsistency in docs (3h → 4h)
  • Alert Comment improvements

  Sponsors

  We extend our gratitude to our supporters at https://renroros.no/, https://immy.bot/, https://oit.co/, https://ninjaone.com/, Huntress at https://huntress.com/, https://halopsa.com/, https://www.deskdirector.com/, https://hudu.com/, our friends at https://www.meetgradient.com/, https://rewst.io/ https://augmentt.com/ and newly added Domotz and Guardz!

  New Contributors

  • @dependabot[bot] made their first contribution in https://github.com/KelvinTegelaar/CIPP/pull/5207
  • @TecharyJames made their first contribution in https://github.com/KelvinTegelaar/CIPP/pull/5349
  • @StevenVBeek made their first contribution in https://github.com/KelvinTegelaar/CIPP/pull/5346

  Full Changelog: https://github.com/KelvinTegelaar/CIPP/compare/v10.0.0...v10.1.0

  New Contributors API

  • @mpressley-np made their first contribution in https://github.com/KelvinTegelaar/CIPP-API/pull/1822
  • @StevenVBeek made their first contribution in https://github.com/KelvinTegelaar/CIPP-API/pull/1820

  Full API Changelog: https://github.com/KelvinTegelaar/CIPP-API/compare/10.0.9...10.1.0

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v10.0.0 221faa7c9b

  Compare

  v10.0.0 Stable

  kerem released this 2026-01-16 20:27:06 +03:00 | 946 commits to main since this release

  📅 Originally published on GitHub: Fri, 16 Jan 2026 18:13:29 GMT
  🏷️ Git tag created: Fri, 16 Jan 2026 17:27:06 GMT

  We did a Microsoft.

  The first release of the new year and it's a big one. During the last 4 weeks our developers and our contributors came together to make a magical new version of CIPP.

  Before we get started with the cool new features, this is one of those releases where we really pushed on making things happen for our entire industry. We've integrated more OSS projects into our OSS product, that allows us all to be lifted up but also contribute back to these projects. That's why I want to thank the team at Maester and @merill for making sure we all keep the OSS spirit alive.

  Now, let's make ourselves a Xanadu cocktail and look at the changes.

  _{Oh yeah, we also did a Microsoft; skipped 9 and went straight to 10. Just because we're so proud of this release.}

  New Dashboard, who dis?

  We've looked at our dashboard good and long and figured we need more actionable data on there. Getting our community feedback was amazing during this process and we've built a pretty cool new overview.

  The new dashboard shows you exactly the tenant state you'd expect to see; Secure Score, MFA status, which MFA devices are used, licenses, but also counts of your users, policies, and more. You'll also notice a new card called "Assessment" and the ability to select a report. This is data that is collected every night and we perform all tests in each test suite fully automatically.

  That means you can test against any Maester test included in CIPP, currently we have the full Microsoft ZTNA test thanks to the help of Microsoft directly, we have ORCA, Scuba, and there is more coming; Full CIS testing using the Maester framework inside of CIPP, for all your tenants.

  We're also allowing you to create your own tests in the next version - Allowing you to query against any object our M365 database to see what's going on with your tenant. Custom reporting? Coming too!

  Interested how this looks? check out the demo here.

  Drifting with better UX

  We had some really good suggestions around UX so we figured lets drift around the corner and help you understand things better. First of we've added filters to the drift page, allowing you to easily compare to the settings you want, the drift page now also shows things that are aligned correctly.

  When things aren't aligned however, we've added the ability for you to see exactly what object isn't in sync. So if a CA policy is missing its excluded users group, you'll be able to zoom in on that much easier. Want to see how that looks? check out this screenshot.

  

  Reports reports reports

  We've had users ask for a couple of pretty complex reporting for a long time now; the MFA report for every single tenant at the same time, and a report of all users mailbox permissions. With the new testing database we've created for Maester it's actually much easier to execute these kind of complex reports. So what does this mean? You can now find a mailbox permissions report under our Exchange header. This report is updated nightly, but of course we've created a button to get an instant report too.

  JIT improvements

  Thanks to @Zacgoose we've updated our JIT settings; you're now able to set the maximum time for a JIT admin inside of the settings menu, and you're able to create JIT templates so it's always setup exactly the way you like it. Thanks Zac!

  Timezones

  Under super admin you can now find a timezone settings. Here you can setup the timezone the function app runs in, this is useful if your jobs sometimes run during working hours and you don't want that. Just a quick QoL improvement we've implemented.

  And so much more:

  • We've implemented a new alert for when Secure Defaults and CA isn't present.
  • We've fixed a bug when you deleted a standard and it didn't remove it
  • We've fixed the issue with links for enterprise apps not being right
  • We fixed an issue with MX record reporting not showing all results
  • We've fixed another problem with BEC and usernames with the same format.
  • Updated the drift management page to always show the names of policies
  • Updated the standards report to be slightly prettier. :)
  • And so much more.

  Sponsors

  We extend our gratitude to our supporters at https://renroros.no/, https://immy.bot/, https://oit.co/, https://ninjaone.com/, Huntress at https://huntress.com/, https://halopsa.com/, https://www.deskdirector.com/, https://hudu.com/, our friends at https://www.meetgradient.com/, https://rewst.io/ https://augmentt.com/ and newly added Domotz and Guardz!

  What's Changed in the API

  • Added overwrite toggle for transport rule standard by @kakaiwa in https://github.com/KelvinTegelaar/CIPP-API/pull/1755
  • Enterprise Apps link in new service principal alerts are not in the correct format by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1757
  • Fix: Fix app protection policies not being listed by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1756
  • Add Get-CIPPAlertIntunePolicyConflicts function by @MWG-Logan in https://github.com/KelvinTegelaar/CIPP-API/pull/1759
  • Fix: hashtable alert errors for CIPPAlertOneDriveQuota by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1760
  • Bug: Handle array type for conditions.users in Conditional Access Template processing by @sfaxluke in https://github.com/KelvinTegelaar/CIPP-API/pull/1754
  • Check accountEnabled property for shared mailbox user by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1758
  • Feat: Add functions to list and manage trusted and blocked senders by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1744
  • Fix: Sort group members and owners by displayName by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1765
  • Fix: Remove measure command from Get-CIPPAlertNewAppApproval by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1762
  • Add secret name / ID to table by @chase-vgo in https://github.com/KelvinTegelaar/CIPP-API/pull/1761
  • Optimize MFA state retrieval and policy mapping by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1764
  • Add JIT Admin template management and settings by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1767
  • Fix: Update return message for license assignment by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1770
  • Fix: Enhance error handling for user creation tasks by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1768
  • Dev to release - CIPP X(10.0.0) by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP-API/pull/1772

  Full Changelog: https://github.com/KelvinTegelaar/CIPP-API/compare/8.8.2...10.0.0

  What's Changed

  • Dev to hotfix by @JohnDuprey in https://github.com/KelvinTegelaar/CIPP/pull/5112
  • Dev to hotfix by @JohnDuprey in https://github.com/KelvinTegelaar/CIPP/pull/5124
  • Added overwrite toggle for transport rule standard by @kakaiwa in https://github.com/KelvinTegelaar/CIPP/pull/5141
  • Add Intune policy conflict alert configuration by @MWG-Logan in https://github.com/KelvinTegelaar/CIPP/pull/5150
  • Feat: Add requestDate column with formatted DateTime by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5161
  • Tenant selector bug fix by @ZenTopBrandon in https://github.com/KelvinTegelaar/CIPP/pull/5167
  • Update GDAP invite URLs to new Microsoft admin domain by @sfaxluke in https://github.com/KelvinTegelaar/CIPP/pull/5175
  • Stop Dependabot bullying by @LukeSteward in https://github.com/KelvinTegelaar/CIPP/pull/5172
  • Feat: Add trusted and blocked senders exchange user card and action by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5092
  • Add JIT Admin Templates and settings integration by @Zacgoose in https://github.com/KelvinTegelaar/CIPP/pull/5192
  • Dev to release - CIPP X(10.0.0) by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP/pull/5202

  New Contributors

  • @LukeSteward made their first contribution in https://github.com/KelvinTegelaar/CIPP/pull/5172

  Full Changelog: https://github.com/KelvinTegelaar/CIPP/compare/v8.8.0...v10.0.0

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v8.8.0 2439a159d5

  Compare

  v8.8.0 Stable

  kerem released this 2025-12-18 01:27:19 +03:00 | 1110 commits to main since this release

  📅 Originally published on GitHub: Wed, 17 Dec 2025 23:21:21 GMT
  🏷️ Git tag created: Wed, 17 Dec 2025 22:27:19 GMT

  SPPEEEEDD and PPOWEEERRRR

  This release we've been pushing the envelope on backend improvements, our dev team shifted their focus to maintenance, and it shows, we've been removing some older legacy code and polishing what we have to increase our speed. We've also built so many feature requests again, which I love for the last release of the year; imagine being able to make a large group of MSPs happy with just what they needed.

  So, let's make a cocktail out of the swamp water of old code that we took out, and take a nice refreshing dive into our new release

  Standards and Intune

  Our team looked at the way we deploy standards and Intune policies and wanted to improve on this; not just for speed but also reporting and just general prettiness of how this works, so we've built better tracking around the state of Intune Policies, decreasing the amount of processing power needed to implement policies; a great benefit of this speed increase is also that your (self-hosted) costs will go down thanks to more efficiency.

  We've also added better frontend options for selecting how you deploy policies and set assignments, you'll have a better experience and an easier way to set applications, intune policies, and CA policy assignments to groups or users.

  Backup Retention Policies

  Many people use the tenant backup feature in CIPP, and use CIPP configuration backups, the biggest issue some users bumped into was that we stored things infinitely - You're now able to create your own backup retention policies using the CIPP settings menu! The default is 30 days, but you can extend this to whatever you'd like.

  Intune Passcodes

  Aren't those device passcodes or pins annoying? Using the latest update you're able to clear them for managed devices, especially handy when a user forgot their passcodes.

  JIT improvements

  One of our users loves the JIT feature but wanted more auditing, so we did just that, from now on we'll add which user has created the JIT request directly in the table, we also added the start and end date for extra clarity and the JIT user current state. The table also looks a little nicer now.

  So many fixes

  I'd love to sit her for a day and type out every single fix, but please check the full release notes and code below because we have so much being released in this one. :)

  Sponsors

  We extend our gratitude to our supporters at https://renroros.no/, https://immy.bot/, https://oit.co/, https://ninjaone.com/, Huntress at https://huntress.com/, https://halopsa.com/, https://www.deskdirector.com/, https://hudu.com/, our friends at https://www.meetgradient.com/, https://rewst.io/ https://augmentt.com/ and newly added Domotz and Guardz!

  As each year around this time I'm proud to announce our event sponsor; Right of Boom. If you aren't aware yet, CyberDrain is at the Right of Boom event this year with our CyberDrain Skill Journey preday. This preday is an action packed session that teaches you all about managing M365 with CIPP. We're also giving you a voucher for an M365 fundamentals exam.

  What's Changed

  • Update CippTransportRuleDrawer.jsx by @Zacgoose in https://github.com/KelvinTegelaar/CIPP/pull/4988
  • Fix: Add condition for copying sent items based on recipient type and rename field by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4992
  • Dev to hotfix by @JohnDuprey in https://github.com/KelvinTegelaar/CIPP/pull/4994
  • Feat: Add custom group assignment option for Intune applications and enhance assignment dialogs by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4996
  • Dev to hotfix by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP/pull/5007
  • Add Admin Role Reporting to MFA User List by @ZenTopBrandon in https://github.com/KelvinTegelaar/CIPP/pull/5014
  • feat: Add multi-group selection support for Add to Group user action by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5019
  • Feat: Intune assignments overhaul by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5013
  • Fix SMTP Auth alerts by @JyskIT-DK in https://github.com/KelvinTegelaar/CIPP/pull/5010
  • Fix: Update alert icons to use MUI for consistency by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5004
  • Chore: Update confirmation messages to include userPrincipalName by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5025
  • Feat: Add Discovered Apps Intune page by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5034
  • Add tooltips to input fields for truncated labels by @Copilot in https://github.com/KelvinTegelaar/CIPP/pull/5051
  • Add TaskState filters to CA Vacation Mode page by @Copilot in https://github.com/KelvinTegelaar/CIPP/pull/5050
  • Feat: Add alert for quarantine release requests and rename frontend alert agent by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5068
  • Feat: Add auto-archiving configuration standard by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5077
  • Feat: Add validators to the standards by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5078
  • Fix: Users bulk actions, set out of office options in UI by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5081
  • exclude all tenant user template from template list page by @Zacgoose in https://github.com/KelvinTegelaar/CIPP/pull/5083
  • Add alert for Global Admins outside approved list by @MWG-Logan in https://github.com/KelvinTegelaar/CIPP/pull/5088
  • Add reference and post execution fields to forms by @Zacgoose in https://github.com/KelvinTegelaar/CIPP/pull/5086
  • Feat: Add MDM enrollment standard for registration process by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5089
  • Feat: Add 14-day and 21-day recurrence intervals for alert scheduling… by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5090
  • Feat: Add toggle for displaying more partner relationships by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/5100
  • Dev to release by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP/pull/5104

  New Contributors

  • @ZenTopBrandon made their first contribution in https://github.com/KelvinTegelaar/CIPP/pull/5014

  Full Changelog: https://github.com/KelvinTegelaar/CIPP/compare/v8.7.0...v8.8.0

  What's Changed on the API

  • Add Admin Role Reporting to MFA User List by @ZenTopBrandon in https://github.com/KelvinTegelaar/CIPP-API/pull/1723
  • Feat: Intune assignments overhaul by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1722
  • Feat: Add QuarantineReleaseRequests alert for handling quarantine release requests by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1733
  • Fix PWPush Pro account dropdown not populating by @lacymooretx in https://github.com/KelvinTegelaar/CIPP-API/pull/1730
  • Improve tenant filtering in audit log rules by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1726
  • Return AllTenants user templates along with specific tenant user templates by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1731
  • Fix: Loading issue for ListMailQuarantine with allTenants by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1732
  • Feat: Improve JIT Admin creation and copy button behavior by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1736
  • Feat: Add auto-archiving configuration standard by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1737
  • Add Get-CIPPAlertGlobalAdminAllowList function and tests by @MWG-Logan in https://github.com/KelvinTegelaar/CIPP-API/pull/1741
  • Add includeAllTenants flag to user defaults listing by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1739
  • Reference message for multiple endpoints including scheduled tasks by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1740
  • Feat: Add MDM enrollment control during account registration by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1743
  • Remove Az.KeyVault 6.3.1 module and add KeyVault secret cmdlets ,updated dev workflow file by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1742
  • Add function permissions cache and build script by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1747
  • Dev to release by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP-API/pull/1748

  New Contributors API

  • @lacymooretx made their first contribution in https://github.com/KelvinTegelaar/CIPP-API/pull/1730

  Full Changelog: https://github.com/KelvinTegelaar/CIPP-API/compare/8.7.2...8.8.0

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v8.7.0 ac2c7fc930

  Compare

  v8.7.0 Stable

  kerem released this 2025-11-21 20:07:25 +03:00 | 1271 commits to main since this release

  📅 Originally published on GitHub: Fri, 21 Nov 2025 17:25:18 GMT
  🏷️ Git tag created: Fri, 21 Nov 2025 17:07:25 GMT

  Cocktail of the week?

  So I like wordplay, I like being a bit on the nose with things, today is one of those where I figured that this release could be called the cocktail of the week, which actually is a cocktail. Don't believe me? check out the recipe here.. Now, prepare that drink, sit down, and we'll have a chat about all the cool new features and fixes we have for you.

  Conditional Access, Vacations, and upgrades

  We've had this awesome feature in our Conditional Access configuration for while; Vacation mode. A user goes on vacation, and gets temporarily excluded or included to a Conditional Access Policy or a location. We've figured we could improve on this even more so that's what we've done. Vacation mode now uses an exclusion group instead of just adding the user willynilly,

  we've also improved vacation mode that IF a user is on vacation, and you have location based alerts setup that can exclude that user from location based alerting.

  Of course, that's not all. We've decided to upgrade Conditional Access while we're at it. You now have a new checkbox to automatically create groups if they are missing. That means if you deploy a CA policy with a group that doesn't exist yet, we'll build the group for you.

  Cool fact; if the group exists in the templates, we'll use that template to make sure its using the correct parameters. It's magic! Automagic!

  Better Enterprise Application Deployment experience

  The Enterprise application deployment experience has gotten to be a little complex with a lot of tasks, we decided we could do better, we wanted to ease the UX experience for you.

  Its now as simple as going over to Tenant Administration -> Applications and clicking the button "Create Template from app" - That template is then deployable via standards, or via the one-off deployment and will include all the permissions for that application.

  Expansion of our Dynamic Groups for tenants

  Last release we've added our Dynamic Tenant Groups, this release we're expanding on that by adding the ability to use variables in these groups to sort tenants, and by adding the ability to add static groups to dynamic groups - giving you so much extra flexbility to create and customize groups to your heart content.

  Secure Score Improvements

  We've added filtering to our secure score pages so its easier to sort what tasks you still have to do, but we also added a pretty cool new standard. This standard allows you to set any secure score item to the status you want it to be. Using an external mail solution or AV? set all of those to "Resolved by Third Party" automagically. There's that word again, Automagic!

  So many fixes

  I'd love to sit her for a day and type out every single fix, but please check the full release notes and code below because we have so much being released in this one. :)

  Sponsors

  We extend our gratitude to our supporters at https://renroros.no/, https://immy.bot/, https://oit.co/, https://ninjaone.com/, Huntress at https://huntress.com/, https://halopsa.com/, https://www.deskdirector.com/, https://hudu.com/, our friends at https://www.meetgradient.com/, https://rewst.io/ https://augmentt.com/ and newly added Domotz and Guardz!

  As each year around this time I'm proud to announce our event sponsor; Right of Boom. If you aren't aware yet, CyberDrain is at the Right of Boom event this year with our CyberDrain Skill Journey preday. This preday is an action packed session that teaches you all about managing M365 with CIPP. We're also giving you a voucher for an M365 fundamentals exam.

  What's Changed

  • Dev to hotfix by @JohnDuprey in https://github.com/KelvinTegelaar/CIPP/pull/4861
  • Display group type in labels for clarity by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4885
  • Fix: Fix skeleton loading display when propertyItems array is empty by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4868
  • Feat? Add default domain display for tenant details by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4884
  • Fix sorting for nested properties in tables by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4873
  • Input validation for CIPP Roles by @LoldenCode in https://github.com/KelvinTegelaar/CIPP/pull/4875
  • Edit transport rules, changed to draw by @Zacgoose in https://github.com/KelvinTegelaar/CIPP/pull/4890
  • Feat: Remove deprecated policy pages and update assignment filter pages by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4889
  • Feat: Add TeamsExternalChatWithAnyone standard by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4908
  • Update licenses to the latest version from Microsoft by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4913
  • Chore: Format code with Prettier and remove some unused imports by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4933
  • Feat: Improve license overview to show assigned users and license groups by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4930
  • Fix: Retrieval of FileVault key by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4922
  • Fix: group settings display issue by updating edit group links by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4921
  • [WIP] Add alert for tenants with report-only CA policies by @Copilot in https://github.com/KelvinTegelaar/CIPP/pull/4946
  • Feat: Add "Who can bypass the lobby?" setting to Teams meeting policy by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4962
  • Feat: Add bulk export functionality for selected rows in CSV and PDF formats by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4961
  • Feat: Add source of authority configuration by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4951
  • Fix:Consolidate hide/unhide actions for Global Address List visibility by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4950
  • Add filter controls to Secure Score recommendations view by @Copilot in https://github.com/KelvinTegelaar/CIPP/pull/4966
  • Feat: Add form reset on successful guest invitation by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4969
  • Dev to release by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP/pull/4977

  New Contributors

  • @Copilot made their first contribution in https://github.com/KelvinTegelaar/CIPP/pull/4946

  What's Changed in API

  • Support for editing transport rules by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1690
  • Fix BPA logging to include tenant information in error messages by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1685
  • Improve error logging in a few standards by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1686
  • Refactor logging and variable usage in assignment filter functions by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1688
  • Add organization ID as a reserved variable and update text replacement function by @ZenTopBrandon in https://github.com/KelvinTegelaar/CIPP-API/pull/1689
  • Feat: Add TeamsExternalChatWithAnyone standard by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1691
  • Update licenses to the latest version from Microsoft by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1692
  • Feat: Improve license overview to show assigned users and license groups by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1696
  • Fix: Retrieve FileVault key in addition to BitLocker key by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1695
  • Fix: Refactor group type determination logic for ListGroups and ListUserGroups by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1693
  • Fix: Filter out excluded licenses in Sync-CippExtensionData function by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1697
  • Fix: Office App deployment issues by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1699
  • Chore: Move Invoke-RemoveQueuedApp to correct folder by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1694
  • [WIP] Add alert for tenants with report-only CA policies by @Copilot in https://github.com/KelvinTegelaar/CIPP-API/pull/1704
  • Fix: Exclude bulk registration accounts from MFA alerts and improve alert structure by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1698
  • Chore: Better admin roles member listing,improve error handling and standardize function casing by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1700
  • Re-add business premium capability by @chase-vgo in https://github.com/KelvinTegelaar/CIPP-API/pull/1706
  • Fix: Refactor Teams global meeting policy to include AutoAdmittedUsers setting by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1709
  • Feat: Add functions to manage SOA by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1705
  • Feat: Fix ExpiringLicenses alert firing issue and enhance alert data structure by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1708
  • Add SecureScoreRemediation standard for bulk Secure Score control updates by @Copilot in https://github.com/KelvinTegelaar/CIPP-API/pull/1711
  • Dev to release by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP-API/pull/1712

  New Contributors

  • @ZenTopBrandon made their first contribution in https://github.com/KelvinTegelaar/CIPP-API/pull/1689
  • @Copilot made their first contribution in https://github.com/KelvinTegelaar/CIPP-API/pull/1704

  Full Changelog: https://github.com/KelvinTegelaar/CIPP-API/compare/8.6.2...8.7.0

  Full Changelog: https://github.com/KelvinTegelaar/CIPP/compare/v8.6.0...v8.7.0

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v8.6.0 64facf727f

  Compare

  v8.6.0 Stable

  kerem released this 2025-10-23 22:42:17 +03:00 | 1382 commits to main since this release

  📅 Originally published on GitHub: Thu, 23 Oct 2025 19:43:23 GMT
  🏷️ Git tag created: Thu, 23 Oct 2025 19:42:17 GMT

  Woo Woo!?

  This release is named the Woo Woo, because what I really wanted to woo everyone using it, and everyone that doesn't yet. Did it work? Well, if it didn't, go to our friends over at Opendrinks to go get yourself a Woo Woo

  Lets get down to business. We have some awesome new features and some great QoL stuff in this release. Lets start with something a little dynamic shall we?!

  Dynamic Tenant Groups

  So imagine, you're messing around with your tenant groups and you've created a bunch of them but now you have to maintain those. Everyone is constantly adding or removing licenses or packages at your MSP so it becomes complex to keep these up to date right?

  Well, no more. We're introducing Dynamic Tenant Groups. This allows you to create tenant groups that are based on a tenants license, available features, and more. We even give you default groups such as "M365 Business Premium" and "Entra Premium" groups so you can easily get started using our examples.

  Want to see it in action? check out our storylane here: https://app.storylane.io/share/idk6ryipa9ch

  Release notes in app

  So we've had some questions from users of the app; Where can they find the latest release notes without leaving? some engineers don't check Github or aren't active in discord. Well, you might just be reading these directly from the application. There's even a handy button to switch releases at the top if you want to catch up. As easy as reading your favourite webcomic.

  Fixes Fixes Fixes

  There's been so much QoL and bugfixes again, or new features that are just amazing, let's list the important ones and get back to your day job.

  • Fixed an issue with internal references not loading
  • Fixed an issue with Partner webhooks/automated onboarding not populating the fields
  • Fixed an issue with Standards allowing blank tenants
  • Added a new alert for MX record monitoring
  • Fixed issues with group templates and deployment of groups
  • Fixed an issue with repeat alerts for breach detection
  • Added more deleted item types to delete items list
  • Added group visibility option in the group management section
  • Fixed dark and light mode HTML and PSA emails
  • Added the ability to retrieve filevault keys
  • Fixed an issue with duplicate app detection when deploying chocolatey or winget apps.
  • Improved UX for badges in tables with different colours

  Sponsors

  We extend our gratitude to our supporters at https://renroros.no/, https://immy.bot/, https://oit.co/, https://ninjaone.com/, Huntress at https://huntress.com/, https://halopsa.com/, https://www.deskdirector.com/, https://hudu.com/, our friends at https://www.meetgradient.com/, https://rewst.io/ https://augmentt.com/ and newly added Domotz and Guardz!

  As each year around this time I'm proud to announce our event sponsor; Right of Boom. If you aren't aware yet, CyberDrain is at the Right of Boom event this year with our CyberDrain Skill Journey preday. This preday is an action packed session that teaches you all about managing M365 with CIPP. We're also giving you a voucher for an M365 fundamentals exam.

  Seats are limited, and early bird is ending soon. If you want to be able to get your CIPP certifications, please head on over to the registration page here

  Already registered? Scared of going alone? Understanding that learning is more fun together? Register for a chance to win a second ticket for a colleague or friend then go to this page

  What's Changed for API

  • Feat: Add Invoke-ListGitHubReleaseNotes function for GitHub release retrieval by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1676
  • Feat: New standard to control BitLocker key recovery for owned devices by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1675
  • Fix: Enhance EntraConnectSyncStatus alert with detailed information by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1678
  • Refactor Reference assignment in GDAP invite script by @Zacgoose in https://github.com/KelvinTegelaar/CIPP-API/pull/1677
  • LAPS not LAPs by @isgq-github01 in https://github.com/KelvinTegelaar/CIPP-API/pull/1679
  • Feat: Logging improvements, add AllTenants support for listing tenant allow/blocklist by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1674
  • Fix: Refactor Invoke-ExecJITAdmin and add Invoke-ListJITAdmin by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1680
  • Feat: Add support for setting group visibility in Microsoft 365 groups by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1681
  • Fix: Remove wrong license check by @kris6673 in https://github.com/KelvinTegelaar/CIPP-API/pull/1682
  • Dev top release by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP-API/pull/1683

  Full Changelog: https://github.com/KelvinTegelaar/CIPP-API/compare/8.5.2...8.6.0

  What's Changed

  • Dev to hotfix by @JohnDuprey in https://github.com/KelvinTegelaar/CIPP/pull/4784
  • Fix: EDR only assignment and remove deprecated option by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4793
  • Feat: Enable multiple selections for user permissions and refactor alias handling by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4796
  • Feat: Add Transport and Connector drawers by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4783
  • Fix: Replace removed add pages with drawer buttons by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4803
  • Reset form values on successful shared mailbox creation by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4811
  • Dev to hotfix by @JohnDuprey in https://github.com/KelvinTegelaar/CIPP/pull/4812
  • Feat: Add pop-up notification for new releases by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4815
  • Feat: Add refresh functionality for Out Of Office data and fix contact permissions fetching by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4819
  • Feat: New standard to control BitLocker key recovery for owned devices by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4814
  • Fix: Readd "View release notes" button by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4823
  • It's LAPS not LAPs :P by @isgq-github01 in https://github.com/KelvinTegelaar/CIPP/pull/4827
  • Fix: Enhance state badge UX in lists by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4830
  • Feat: Add AllTenants support for tenant allow/block list by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4813
  • Fix: Update API URL for listing JIT Admins by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4829
  • (bug): Adjusted data handling to handle cases where ForwardingAddress… by @Jr7468 in https://github.com/KelvinTegelaar/CIPP/pull/4840
  • Feat: Add visibility option to M365 Group settings by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4839
  • Fix: Update confirmation texts to include device names and add condition for FileVault action by @kris6673 in https://github.com/KelvinTegelaar/CIPP/pull/4845
  • Fixes for deploying new EXO rule by @Zacgoose in https://github.com/KelvinTegelaar/CIPP/pull/4847
  • Dev to release by @KelvinTegelaar in https://github.com/KelvinTegelaar/CIPP/pull/4857
  • fix typo by @JohnDuprey in https://github.com/KelvinTegelaar/CIPP/pull/4858

  Full Changelog: https://github.com/KelvinTegelaar/CIPP/compare/v8.5.0...v8.6.0

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads