> For the complete documentation index, see [llms.txt](https://docs.realmjoin.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.realmjoin.com/automation.md). # Automation - [Connecting Azure Automation](https://docs.realmjoin.com/automation/connecting-azure-automation.md): Connect an Azure Automation Account to RealmJoin Portal with the RealmJoin PowerShell module, so RealmJoin can deploy, run and monitor runbooks in your tenant. - [Switching to the RealmJoin managed app](https://docs.realmjoin.com/automation/connecting-azure-automation/managed-app-migration.md): Replace the per-tenant RealmJoin Runbook Management app registration and its client secret with the RealmJoin managed multi-tenant app, using the RealmJoin PowerShell module. - [Runbook Management App Permissions](https://docs.realmjoin.com/automation/connecting-azure-automation/required-permissions.md): How RealmJoin authenticates against your Azure Automation Account, and which Azure permissions it needs to sync and run runbooks. - [Runbook Execution Requirements](https://docs.realmjoin.com/automation/connecting-azure-automation/azure-ad-roles-and-permissions.md): This wiki pages addresses what requirements and (system-level) permissions have to be given, so that runbooks can be executed. - [Runbooks](https://docs.realmjoin.com/automation/runbooks.md): Automate day-to-day operations in your environment. - [Runbook Customization](https://docs.realmjoin.com/automation/runbooks/runbook-customization.md): Adapt RealmJoin's generic runbooks to your environments' needs. - [Runbook Logs](https://docs.realmjoin.com/automation/runbooks/runbook-logs.md): Review recent and archived RealmJoin runbook executions, scoped by type and category, with search and sort. - [Runbook Job Details](https://docs.realmjoin.com/automation/runbooks/runbook-logs/runbook-job-details.md): View RealmJoin runbook job metadata, real-time console output, and details from Azure Automation jobs. - [Runbook Naming Conventions](https://docs.realmjoin.com/automation/runbooks/naming-conventions.md): RealmJoin runbook naming conventions: how context and category map shared repository runbook names into Azure Automation and the portal. - [Runbook Parameters](https://docs.realmjoin.com/automation/runbooks/runbooks.md): RealmJoin runbook parameters such as TenantID and SubscriptionID that connect to Azure Automation and enable process automation. - [Runbook Permissions](https://docs.realmjoin.com/automation/runbooks/runbook-permissions.md): How to grant/deny access to certain runbooks. - [Hybrid Runbook Worker](https://docs.realmjoin.com/automation/runbooks/hybrid-runbook-worker.md): Run RealmJoin runbooks on a Hybrid Runbook Worker so they can reach on-premises and private-network resources that the Azure cloud cannot. - [Runbook References](https://docs.realmjoin.com/automation/runbooks/runbook-references.md) - [Overview](https://docs.realmjoin.com/automation/runbooks/runbook-references/overview.md) - [Device Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/device.md) - [AVD](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/avd.md) - [Restart Host](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/avd/restart-host.md): Restart this AVD session host and return it to service - [Toggle Drain Mode](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/avd/toggle-drain-mode.md): Enable or disable drain mode on this AVD session host - [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general.md) - [Assign Groups By Template](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/assign-groups-by-template.md): Add this device to a predefined set of groups - [Change Grouptag](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/change-grouptag.md): Assign a new Autopilot group tag to this device - [Check Device Compliance](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/check-device-compliance.md): Check the Intune compliance status of this device - [Check Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/check-updatable-assets.md): Check whether this device is enrolled in Windows Update for Business - [Enroll Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/enroll-updatable-assets.md): Enroll this device in Windows Update for Business - [Outphase Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/outphase-device.md): Wipe this Windows device and clean up Intune, Autopilot and Entra ID - [Remove Primary User](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/remove-primary-user.md): Remove the primary user from this device - [Rename Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/rename-device.md): Rename this device in Intune and Autopilot - [Set Primary User](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/set-primary-user.md): Set a new primary user on this device - [Unenroll Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/unenroll-updatable-assets.md): Unenroll this device from Windows Update for Business - [Wipe Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/wipe-device.md): Wipe this Windows or macOS device and clean up its records - [Wipe Managed App Data](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/general/wipe-managed-app-data.md): Remove company app data from this MAM-managed device - [Security](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security.md) - [Check Defender Status](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/check-defender-status.md): Check this device in Entra ID and Defender for Endpoint - [Enable Or Disable Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/enable-or-disable-device.md): Enable or disable this device in Entra ID - [Enable Or Disable Lost Mode](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/enable-or-disable-lost-mode.md): Enable or disable Lost Mode on this supervised iOS or iPadOS device - [Isolate Or Release Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/isolate-or-release-device.md): Isolate this device from the network or release it - [Reset Mobile Device Pin](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/reset-mobile-device-pin.md): Reset the passcode of this mobile device - [Restrict Or Release Code Execution](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/restrict-or-release-code-execution.md): Restrict this device to Microsoft-signed code or lift the restriction - [Show Bitlocker Recovery Key](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/show-bitlocker-recovery-key.md): Show the BitLocker recovery keys of this device - [Show Filevault Recovery Key](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/show-filevault-recovery-key.md): Show the FileVault recovery key of this Mac - [Show Laps Password](https://docs.realmjoin.com/automation/runbooks/runbook-references/device/security/show-laps-password.md): Show the local admin password of this device - [Group Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/group.md) - [Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/devices.md) - [Check Updatable Assets](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/devices/check-updatable-assets.md): Check Windows Update for Business enrollment of this group's devices - [Unenroll Updatable Assets Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/devices/unenroll-updatable-assets_scheduled.md): Unenroll this group's devices from Windows Update for Business - [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general.md) - [Add Or Remove Nested Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/add-or-remove-nested-group.md): Add a nested group to this group or remove it - [Add Or Remove Owner](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/add-or-remove-owner.md): Add an owner to this group or remove one - [Add Or Remove User](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/add-or-remove-user.md): Add a user to this group or remove one - [Change Visibility](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/change-visibility.md): Make this group public or private - [List All Members](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/list-all-members.md): List all members of this group, nested groups included - [List Owners](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/list-owners.md): List the owners of this group - [List User Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/list-user-devices.md): List the devices registered to this group's members - [Remove Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/remove-group.md): Delete this group and its Microsoft 365 resources - [Rename Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/general/rename-group.md): Rename this group or change its description - [Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/mail.md) - [Enable Or Disable External Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/mail/enable-or-disable-external-mail.md): Allow or block external senders for this Microsoft 365 group - [Show Or Hide In Address Book](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/mail/show-or-hide-in-address-book.md): Show or hide this group in the address book - [Teams](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/teams.md) - [Archive Team](https://docs.realmjoin.com/automation/runbooks/runbook-references/group/teams/archive-team.md): Archive the team of this group - [Organization Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/org.md) - [Applications](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications.md) - [Add Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/add-application-registration.md): Create an application registration in Entra ID - [Add Gsa Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/add-gsa-application-registration.md): Create a Global Secure Access application with its access group - [Delete Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/delete-application-registration.md): Delete an application registration and its service principal - [Delete Gsa Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/delete-gsa-application-registration.md): Delete a Global Secure Access application and its access group - [Export Enterprise Application Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/export-enterprise-application-users.md): Export the owners and users of all enterprise applications - [List Inactive Enterprise Applications](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/list-inactive-enterprise-applications.md): List enterprise applications with no recent sign-ins - [Report Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/report-application-registration.md): Report all application registrations, including deleted ones - [Report Expiring Application Credentials Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/report-expiring-application-credentials_scheduled.md): Report expiring client secrets and certificates of app registrations - [Update Application Registration](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/update-application-registration.md): Update redirect URIs, SAML and sign-in settings of an app registration - [Collab](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab.md) - [Check Onedrive Status](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/check-onedrive-status.md): Check whether a user's OneDrive is active, locked or deleted - [List Sharepoint Sitecollection Permission](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/list-sharepoint-sitecollection-permission.md): List the administrators and members of a SharePoint site - [Report Sharepoint Tenant Storage Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/report-sharepoint-tenant-storage_scheduled.md): Monitor SharePoint storage and alert when limits are exceeded - [Report Teams Channels Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/collab/report-teams-channels_scheduled.md): List private and shared channels of all teams with their owners - [Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices.md) - [Add Autopilot Device](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/add-autopilot-device.md): Register a Windows device in Windows Autopilot - [Add Device Via Corporate Identifier](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/add-device-via-corporate-identifier.md): Register a device in Intune by its corporate identifier - [Auto Approve Driver Updates Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/auto-approve-driver-updates_scheduled.md): Approve pending driver updates in Intune driver update policies - [Cleanup Autopilot Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/cleanup-autopilot-devices_scheduled.md): Remove orphaned and never-enrolled Autopilot registrations - [Create Endpoint Analytics Baseline](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/create-endpoint-analytics-baseline.md): Create an Endpoint Analytics baseline with a naming schema - [Dedup Device Names Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/dedup-device-names_scheduled.md): Rename Intune devices that share a display name - [Delete Stale Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/delete-stale-devices_scheduled.md): Delete Intune devices that have been inactive for too long - [Get Bitlocker Recovery Key](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/get-bitlocker-recovery-key.md): Look up a BitLocker recovery key by its key ID - [List Mobile Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/list-mobile-devices.md): List managed mobile devices with inventory and network details - [Notify Users About Low Diskspace Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/notify-users-about-low-diskspace_scheduled.md): Email users whose devices are running out of disk space - [Notify Users About Stale Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/notify-users-about-stale-devices_scheduled.md): Email users about devices they have not used for a while - [Outphase Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/outphase-devices.md): Wipe and clean up several devices at once - [Rename Devices By Group Tag Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/rename-devices-by-group-tag_scheduled.md): Name Autopilot devices after their group tag and serial number - [Report Devices Low Diskspace Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-devices-low-diskspace_scheduled.md): Report devices that are running out of disk space - [Report Devices Without Primary User Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-devices-without-primary-user_scheduled.md): Report Intune devices without a primary user - [Report Primary User Mismatch Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-primary-user-mismatch_scheduled.md): Compare primary users and logons between Intune and RealmJoin - [Report Realmjoin Agent Contact Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-realmjoin-agent-contact_scheduled.md): Report devices whose RealmJoin agent stopped reporting - [Report Stale Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-stale-devices_scheduled.md): Report devices that have been inactive for too long - [Report Users With More Than 5 Devices Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-users-with-more-than-5-devices_scheduled.md): Report users with more than five registered devices - [Report Windows Devices Without Autopilot Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/report-windows-devices-without-autopilot_scheduled.md): Report Windows devices in Entra ID without an Autopilot record - [Sync Device Serialnumbers To Entraid Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/devices/sync-device-serialnumbers-to-entraid_scheduled.md): Copy Intune serial numbers into an Entra ID extension attribute - [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general.md) - [Add Devices Of Users To Group Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-devices-of-users-to-group_scheduled.md): Add the devices of a user group's members to a device group - [Add Management Partner](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-management-partner.md): List or add a Partner Admin Link (PAL) for the tenant - [Add Microsoft Store App Logos](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-microsoft-store-app-logos.md): Add missing logos to Microsoft Store apps in Intune - [Add Office365 Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-office365-group.md): Create a Microsoft 365 group, optionally with a team - [Add Or Remove Safelinks Exclusion](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-or-remove-safelinks-exclusion.md): Allow a URL pattern in a Safe Links policy or remove it - [Add Or Remove Smartscreen Exclusion](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-or-remove-smartscreen-exclusion.md): Allow, warn or block a URL in Defender SmartScreen - [Add Or Remove Trusted Site](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-or-remove-trusted-site.md): Add a URL to the Intune trusted sites list or remove it - [Add Primary Users Of Devices To Group Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-primary-users-of-devices-to-group_scheduled.md): Keep a group in sync with the primary users of Intune devices - [Add Security Group](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-security-group.md): Create a security group in Entra ID - [Add User](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-user.md): Create a new user account in Entra ID - [Add Viva Engange Community](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/add-viva-engange-community.md): Create a Viva Engage community with owners - [Assign Groups By Template Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/assign-groups-by-template_scheduled.md): Add the users of a group to a predefined set of groups - [Bulk Delete Devices From Autopilot](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/bulk-delete-devices-from-autopilot.md): Delete several Autopilot registrations by serial number - [Bulk Retire Devices From Intune](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/bulk-retire-devices-from-intune.md): Retire several Intune devices by serial number - [Check Aad Sync Status Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-aad-sync-status_scheduled.md): Check the last Entra Connect sync and alert when it is off - [Check Assignments Of Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-assignments-of-devices.md): Show which Intune policies and apps target given devices - [Check Assignments Of Groups](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-assignments-of-groups.md): Show which Intune policies and apps target given groups - [Check Assignments Of Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-assignments-of-users.md): Show which Intune policies and apps target given users - [Check Autopilot Serialnumbers](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-autopilot-serialnumbers.md): Check which serial numbers are registered in Autopilot - [Check Device Onboarding Exclusion Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/check-device-onboarding-exclusion_scheduled.md): Keep unenrolled Autopilot devices in a compliance exclusion group - [Enrolled Devices Report Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/enrolled-devices-report_scheduled.md): Report first-time device enrollments of the last weeks - [Export All Autopilot Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-all-autopilot-devices.md): List or export all Windows Autopilot devices - [Export All Intune Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-all-intune-devices.md): Export all Intune devices with their primary users' usage location - [Export Cloudpc Usage Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-cloudpc-usage_scheduled.md): Write daily Windows 365 usage data to an Azure table - [Export Non Compliant Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-non-compliant-devices.md): Export non-compliant Intune devices with their failing settings - [Export Policy Report](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/export-policy-report.md): Export Intune and Entra ID policies as a Markdown report - [Invite External Guest Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/invite-external-guest-users.md): Invite an external person as a guest user - [List All Administrative Template Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/list-all-administrative-template-policies.md): List administrative template policies with their assignments - [List Group License Assignment Errors](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/list-group-license-assignment-errors.md): List groups whose license assignments have errors - [Monitor Service Health Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/monitor-service-health_scheduled.md): Alert by email about new Microsoft 365 service health issues - [Office365 License Report](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/office365-license-report.md): Report Microsoft 365 license usage and availability - [Report Apple Mdm Cert Expiry Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-apple-mdm-cert-expiry_scheduled.md): Alert before Apple MDM certificates and tokens expire - [Report Intune Enrollment Readiness](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-intune-enrollment-readiness.md): Report which users can enroll devices in Intune - [Report License Assignment Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-license-assignment_scheduled.md): Alert when license availability crosses thresholds - [Report Pim Activations Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/report-pim-activations_scheduled.md): Report the PIM role activations of the last month by email - [Sync All Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-all-devices.md): Trigger an Intune sync on all Windows devices - [Sync Apple Tokens](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-apple-tokens.md): Sync Apple enrollment and VPP tokens with Intune - [Sync Channel Or Group Members Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-channel-or-group-members_scheduled.md): Mirror members between a Teams shared channel and a group - [Sync Shared Channel Owners Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/general/sync-shared-channel-owners_scheduled.md): Make a group's members owners of mapped teams and shared channels - [Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail.md) - [Add Distribution List](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-distribution-list.md): Create a classic Exchange Online distribution group - [Add Equipment Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-equipment-mailbox.md): Create an equipment mailbox with optional booking delegates - [Add Mail Contact](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-mail-contact.md): Create a mail contact for an external address - [Add Or Remove Public Folder](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-or-remove-public-folder.md): Create or remove an Exchange Online public folder - [Add Or Remove Teams Mailcontact](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-or-remove-teams-mailcontact.md): Give a Teams channel a friendly email address or remove it - [Add Or Remove Tenant Allow Block List](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-or-remove-tenant-allow-block-list.md): Add or remove a Tenant Allow/Block List entry - [Add Room Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-room-mailbox.md): Create a room mailbox with optional booking delegates - [Add Shared Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/add-shared-mailbox.md): Create a shared mailbox with optional delegate - [Hide Mailboxes Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/hide-mailboxes_scheduled.md): Hide or show all Bookings calendars in the address book - [Set Booking Config](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/mail/set-booking-config.md): Configure the Microsoft Bookings settings of the tenant - [Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone.md) - [Add Or Remove Call Queue Agents](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone/add-or-remove-call-queue-agents.md): Add or remove agents of a Teams call queue - [Add Or Remove Call Queue Authorized Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone/add-or-remove-call-queue-authorized-users.md): Add or remove authorized users of a Teams call queue - [Get Teams Phone Number Assignment](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/phone/get-teams-phone-number-assignment.md): Check whether a phone number is assigned in Microsoft Teams - [Security](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security.md) - [Add Defender Indicator](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/add-defender-indicator.md): Add an allow or block indicator to Defender for Endpoint - [Backup Conditional Access Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/backup-conditional-access-policies.md): Back up all Conditional Access policies to Azure Storage - [Find Sms Auth Phone Number](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/find-sms-auth-phone-number.md): Find the user who holds an SMS sign-in phone number - [List Admin Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-admin-users.md): List all Entra ID admins and check their MFA methods - [List Expiring Role Assignments](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-expiring-role-assignments.md): List Entra ID role assignments that expire soon - [List Inactive Devices](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-inactive-devices.md): List devices with no recent sign-in or Intune sync - [List Inactive Users](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-inactive-users.md): List users with no recent interactive sign-in - [List Information Protection Labels](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-information-protection-labels.md): List the sensitivity labels of the tenant with their IDs - [List Pim Rolegroups Without Owners Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-pim-rolegroups-without-owners_scheduled.md): Alert on PIM role groups that have no owner - [List Users By Mfa Methods Count](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-users-by-mfa-methods-count.md): List users by how many MFA methods they registered - [List Vulnerable App Regs](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/list-vulnerable-app-regs.md): List app registrations possibly affected by CVE-2021-42306 - [Monitor Pending Epm Requests Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/monitor-pending-epm-requests_scheduled.md): Alert by email about pending EPM elevation requests - [Notify Changed Ca Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/notify-changed-ca-policies.md): Alert by email about Conditional Access policy changes - [Report Epm Elevation Requests Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/report-epm-elevation-requests_scheduled.md): Report EPM elevation requests by status and age - [Sync Mfa Secure Users To Group Scheduled](https://docs.realmjoin.com/automation/runbooks/runbook-references/org/security/sync-mfa-secure-users-to-group_scheduled.md): Keep a group filled with users who registered a secure MFA method - [User Runbooks](https://docs.realmjoin.com/automation/runbooks/runbook-references/user.md) - [AVD](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/avd.md) - [User Signout](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/avd/user-signout.md): Sign this user out of their AVD sessions - [Collab](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/collab.md) - [Pre Provision Onedrive](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/collab/pre-provision-onedrive.md): Request the OneDrive of this user before the first sign-in - [General](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general.md) - [Assign Groups By Template](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/assign-groups-by-template.md): Add this user to a predefined set of groups - [Assign Or Unassign License](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/assign-or-unassign-license.md): Assign or remove a license for this user via a license group - [Assign Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/assign-windows365.md): Provision a Windows 365 Cloud PC for this user - [Check Intune Enrollment Readiness](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/check-intune-enrollment-readiness.md): Check whether this user can enroll devices in Intune - [List Group Memberships](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/list-group-memberships.md): List the group memberships of this user - [List Group Ownerships](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/list-group-ownerships.md): List the groups this user owns - [List Manager](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/list-manager.md): Show the manager of this user - [Offboard User Permanently](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/offboard-user-permanently.md): Permanently offboard this user - [Offboard User Temporarily](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/offboard-user-temporarily.md): Temporarily offboard this user - [Reprovision Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/reprovision-windows365.md): Reprovision the Windows 365 Cloud PC of this user - [Resize Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/resize-windows365.md): Resize the Windows 365 Cloud PC of this user - [Unassign Windows365](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/general/unassign-windows365.md): Remove the Windows 365 Cloud PC of this user - [Mail](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail.md) - [Add Or Remove Email Address](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/add-or-remove-email-address.md): Add an email address to this user's mailbox or remove one - [Assign Owa Mailbox Policy](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/assign-owa-mailbox-policy.md): Assign an Outlook on the web policy to this user's mailbox - [Convert To Shared Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/convert-to-shared-mailbox.md): Convert this user's mailbox to a shared mailbox or back - [Delegate Full Access](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/delegate-full-access.md): Grant or remove full access to this user's mailbox - [Delegate Send As](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/delegate-send-as.md): Grant or remove Send As permission on this user's mailbox - [Delegate Send On Behalf](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/delegate-send-on-behalf.md): Grant or remove Send on Behalf permission on this user's mailbox - [Hide Or Unhide In Addressbook](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/hide-or-unhide-in-addressbook.md): Hide this user's mailbox in the address book or show it - [List Mailbox Permissions](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/list-mailbox-permissions.md): List who has access to this user's mailbox - [List Room Mailbox Configuration](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/list-room-mailbox-configuration.md): Show the booking configuration of this room mailbox - [Manage Archive Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/manage-archive-mailbox.md): Enable, disable or check the archive mailbox of this user - [Remove Mailbox](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/remove-mailbox.md): Permanently delete this shared mailbox, room or Bookings calendar - [Set Out Of Office](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/set-out-of-office.md): Set or remove automatic replies for this user - [Set Room Mailbox Configuration](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/mail/set-room-mailbox-configuration.md): Configure the booking rules and booking delegates of this room mailbox - [Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone.md) - [Disable Teams Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/disable-teams-phone.md): Remove Teams phone number and voice policies from this user - [Get Teams User Info](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/get-teams-user-info.md): Show the Teams voice setup of this user - [Grant Teams User Policies](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/grant-teams-user-policies.md): Assign Teams voice and meeting policies to this user - [Set Teams Permanent Call Forwarding](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/set-teams-permanent-call-forwarding.md): Forward this user's calls immediately or turn forwarding off - [Set Teams Phone](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/phone/set-teams-phone.md): Assign a phone number and voice policies to this user - [Security](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security.md) - [Confirm Or Dismiss Risky User](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/confirm-or-dismiss-risky-user.md): Confirm this user as compromised or dismiss the risk - [Create Temporary Access Pass](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/create-temporary-access-pass.md): Create a Temporary Access Pass for this user - [Enable Or Disable Password Expiration](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/enable-or-disable-password-expiration.md): Turn password expiration on or off for this user - [List Mfa Methods](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/list-mfa-methods.md): List the MFA and authentication methods of this user - [List Signin Events](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/list-signin-events.md): Show the recent sign-ins of this user and their failures - [Reset Mfa](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/reset-mfa.md): Remove this user's app, phone, OATH and FIDO2 MFA methods - [Reset Password](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/reset-password.md): Set a new password for this user - [Revoke Or Restore Access](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/revoke-or-restore-access.md): Block this user's sign-in and sessions, or restore access - [Set Or Remove Mobile Phone Mfa](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/security/set-or-remove-mobile-phone-mfa.md): Set or remove the mobile phone MFA method of this user - [Userinfo](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo.md) - [Rename User](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo/rename-user.md): Change this user's sign-in name (UPN) and mailbox alias - [Set Photo](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo/set-photo.md): Set the profile photo of this user from a URL - [Update User](https://docs.realmjoin.com/automation/runbooks/runbook-references/user/userinfo/update-user.md): Update profile details, groups and mailbox settings of this user - [Runbook Report Settings](https://docs.realmjoin.com/automation/runbooks/runbook-report-settings.md): Configure centralized email and storage delivery settings for reporting runbooks. - [Runbook Scheduling](https://docs.realmjoin.com/automation/runbooks/scheduling.md): Execute Runbooks repeatedly over time - [Runbook Release Notes](https://docs.realmjoin.com/automation/runbooks/release-notes.md) - [Remediation Scripts](https://docs.realmjoin.com/automation/remediation-scripts.md): RealmJoin's managed, continuously updated Intune remediation scripts that detect and fix issues on Windows clients. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.realmjoin.com/automation.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.