Commit Graph

148 Commits

Author SHA1 Message Date
8152476ee4 remediation-tool: document the 365 app suite + build consent-audit
Root-caused the recurring '365 suite isn't documented' pain: the apps are fine (tiered by
privilege) but per-tenant consent is NOT uniform and there was no way to see a tenant's
actual grant state. VWP had the Tenant Admin app but no SharePoint app-only role -> silent
401s until this session.

- references/app-suite.md: authoritative, live-verified map of every app, App ID, and
  actually-granted permission per tier; the consent-drift problem + both fix methods
  (adminconsent URL, direct appRoleAssignment grant).
- scripts/consent-audit.sh: audits a tenant (or --all) vs the baseline, grades
  GREEN/AMBER/RED, prints the exact fix per gap. Extends the assign-exchange-role --verify
  pattern to Graph scopes + SharePoint role + EXO role. Verified: BirthBio GREEN, VWP/Cascades
  AMBER (caught real drift - both missing grants).
- SKILL.md: run consent-audit FIRST on any tenant task. Memory + errorlog correction.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 15:15:08 -07:00
42da3cfcca sync: auto-sync from HOWARD-HOME at 2026-07-02 14:48:25
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-02 14:48:25
2026-07-02 14:49:01 -07:00
ccfa4f7b21 sync: auto-sync from HOWARD-HOME at 2026-07-02 11:16:12
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-02 11:16:12
2026-07-02 11:16:42 -07:00
26f47fdd10 sync: auto-sync from HOWARD-HOME at 2026-07-02 09:08:36
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-02 09:08:36
2026-07-02 09:10:02 -07:00
3e6f946377 sync: auto-sync from GURU-5070 at 2026-07-02 06:23:34
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-07-02 06:23:34
2026-07-02 06:25:18 -07:00
30c7b26af2 sync: auto-sync from GURU-BEAST-ROG at 2026-07-01 20:15:51
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-07-01 20:15:51
2026-07-01 20:16:08 -07:00
2937b00ebf sync: auto-sync from GURU-5070 at 2026-07-01 15:49:56
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-07-01 15:49:56
2026-07-01 15:50:54 -07:00
9e78a153f3 sync: auto-sync from HOWARD-HOME at 2026-07-01 13:22:23
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-01 13:22:23
2026-07-01 13:24:58 -07:00
af8a3de00e sync: auto-sync from GURU-5070 at 2026-07-01 13:06:10
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-07-01 13:06:10
2026-07-01 13:07:50 -07:00
e527b89999 sync: auto-sync from HOWARD-HOME at 2026-07-01 11:39:58
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-01 11:39:58
2026-07-01 11:41:17 -07:00
6f7f939a62 sync: auto-sync from GURU-5070 at 2026-07-01 09:32:17
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-07-01 09:32:17
2026-07-01 09:33:09 -07:00
6251044baf sync: auto-sync from GURU-5070 at 2026-07-01 05:15:39
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-07-01 05:15:39
2026-07-01 05:16:24 -07:00
01613697c6 sync: auto-sync from GURU-5070 at 2026-06-30 17:21:06
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-30 17:21:06
2026-06-30 17:21:47 -07:00
f6f6aae618 sync: auto-sync from GURU-BEAST-ROG at 2026-06-30 15:11:06
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-30 15:11:06
2026-06-30 15:12:12 -07:00
51335db124 sync: auto-sync from HOWARD-HOME at 2026-06-30 11:27:16
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-30 11:27:16
2026-06-30 11:27:47 -07:00
5e92c33b73 sync: auto-sync from HOWARD-HOME at 2026-06-30 10:37:25
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-30 10:37:25
2026-06-30 10:37:58 -07:00
6cc0c08ac4 sync: auto-sync from HOWARD-HOME at 2026-06-30 08:45:13
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-30 08:45:13
2026-06-30 08:45:47 -07:00
801ff788a6 sync: auto-sync from GURU-5070 at 2026-06-30 06:05:04
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-30 06:05:04
2026-06-30 06:07:35 -07:00
91e95b1e4d sync: auto-sync from HOWARD-HOME at 2026-06-29 22:26:40
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-29 22:26:40
2026-06-29 22:27:09 -07:00
ae3ed4a872 sync: auto-sync from HOWARD-HOME at 2026-06-29 15:33:39
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-29 15:33:39
2026-06-29 15:35:01 -07:00
9a6e1157a7 sync: auto-sync from GURU-5070 at 2026-06-29 15:30:34
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-29 15:30:34
2026-06-29 15:31:35 -07:00
a5dc51168e sync: auto-sync from HOWARD-HOME at 2026-06-29 14:22:54
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-29 14:22:54
2026-06-29 14:24:17 -07:00
00af39d369 sync: auto-sync from HOWARD-HOME at 2026-06-29 14:23:40
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-29 14:23:40
2026-06-29 14:24:12 -07:00
e99110fdc9 sync: auto-sync from GURU-5070 at 2026-06-29 11:45:50
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-29 11:45:50
2026-06-29 11:46:42 -07:00
1f15a6bc79 sync: auto-sync from GURU-5070 at 2026-06-29 11:05:52
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-29 11:05:52
2026-06-29 11:06:44 -07:00
8652a6db09 sync: auto-sync from HOWARD-HOME at 2026-06-28 19:08:56
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-28 19:08:56
2026-06-28 19:09:29 -07:00
a4ed35c9b9 sync: auto-sync from HOWARD-HOME at 2026-06-27 21:44:08
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-27 21:44:08
2026-06-27 21:44:42 -07:00
58b6d931cb sync: auto-sync from HOWARD-HOME at 2026-06-27 18:58:49
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-27 18:58:49
2026-06-27 19:00:08 -07:00
a8e7b419ac sync: auto-sync from GURU-5070 at 2026-06-27 18:49:16
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-27 18:49:16
2026-06-27 18:50:05 -07:00
4321dbbbc0 sync: auto-sync from GURU-5070 at 2026-06-27 04:42:51
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-27 04:42:51
2026-06-27 04:44:53 -07:00
5bace24371 sync: auto-sync from HOWARD-HOME at 2026-06-26 11:40:19
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-26 11:40:19
2026-06-26 11:40:52 -07:00
0cf843e13d sync: auto-sync from HOWARD-HOME at 2026-06-26 11:24:30
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-26 11:24:30
2026-06-26 11:25:00 -07:00
f6c0f8cbe0 sync: auto-sync from HOWARD-HOME at 2026-06-26 09:40:32
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-26 09:40:32
2026-06-26 09:41:00 -07:00
929598418e sync: auto-sync from HOWARD-HOME at 2026-06-26 08:54:48
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-26 08:54:48
2026-06-26 08:55:19 -07:00
10a90bb213 sync: auto-sync from HOWARD-HOME at 2026-06-26 08:41:22
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-26 08:41:22
2026-06-26 08:42:30 -07:00
bd52dde6a7 sync: auto-sync from GURU-5070 at 2026-06-26 08:02:22
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-26 08:02:22
2026-06-26 08:03:27 -07:00
270e294938 sync: auto-sync from HOWARD-HOME at 2026-06-26 07:19:00
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-26 07:19:00
2026-06-26 07:20:04 -07:00
6d65bff791 sync: auto-sync from GURU-5070 at 2026-06-26 06:29:48
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-26 06:29:48
2026-06-26 06:30:46 -07:00
1d99dc93ed sync: auto-sync from HOWARD-HOME at 2026-06-25 23:09:59
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-25 23:09:59
2026-06-25 23:10:26 -07:00
563ff9e8fa sync: auto-sync from HOWARD-HOME at 2026-06-25 21:21:56
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-25 21:21:56
2026-06-25 21:23:24 -07:00
730d26437b sync: auto-sync from GURU-5070 at 2026-06-25 21:13:47
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-25 21:13:47
2026-06-25 21:15:00 -07:00
db73af2866 sync: auto-sync from HOWARD-HOME at 2026-06-25 19:20:21
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-25 19:20:21
2026-06-25 19:21:43 -07:00
d1de83a6d3 sync: auto-sync from GURU-5070 at 2026-06-25 19:18:08
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-25 19:18:08
2026-06-25 19:19:46 -07:00
Winter Williams
2391b510a5 sync: auto-sync from GURU-BEAST-ROG at 2026-06-25 19:13:01
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-25 19:13:01
2026-06-25 19:13:21 -07:00
93bd5379e3 sync: auto-sync from HOWARD-HOME at 2026-06-25 15:21:30
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-25 15:21:30
2026-06-25 15:22:06 -07:00
5af2fc09ec errorlog: datto-edr scan-endpoint friction (dead routes + tenant-wide footgun)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-25 13:55:44 -07:00
a96a15a1d2 sync: auto-sync from HOWARD-HOME at 2026-06-25 13:43:47
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-25 13:43:47
2026-06-25 13:44:18 -07:00
d4fd71baab sync: auto-sync from HOWARD-HOME at 2026-06-25 12:53:21
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-25 12:53:21
2026-06-25 12:54:04 -07:00
e61b39b5c8 sync: auto-sync from GURU-5070 at 2026-06-25 12:35:22
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-25 12:35:22
2026-06-25 12:37:54 -07:00
b9d4cfde98 sync: auto-sync from HOWARD-HOME at 2026-06-25 12:30:38
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-25 12:30:38
2026-06-25 12:31:14 -07:00