Collects application IDs from four places: the EWS usage report (optional), the EwsAllowedAppIDs list, EWS permissions in Microsoft Entra ID (full_access_as_app and EWS.AccessAsUser.All) and RBAC for Applications in Exchange Online. For each application it adds the name, whether it is Microsoft's, a vendor's or your own, the verified publisher and ... More info

READ-ONLY: this script changes nothing in your tenant. It only runs Get-* cmdlets and Graph GET requests. 1. Tenant state (always): EwsEnabled, the EwsAllowedAppIDs allow list, the older user-agent policy (EwsApplicationAccessPolicy / EwsAllowList) and how many mailboxes have EWS turned off. 2. -UsageCsv: the CSV you export from Microsoft... More info