Runbook References

Runbook References

This section contains detailed documentation for all available RealmJoin Runbooks. The runbooks are automatically generated from the realmjoin-runbooks repository and updated daily.

All runbooks are organized into different folders based on their area of application.

The following categories are currently available:

• device

• group

• org

• user

Each category contains multiple runbooks that are further divided into subcategories based on their functionality. The runbooks are listed in alphabetical order within each subcategory.

RealmJoin Runbook overview

In the following, each runbook is listed along with a brief description or synopsis to give a clear understanding of its purpose and functionality. Also the document for each runbook contains information about permissions, where to find, notes, and parameters and further information in general.

Runbook categorie overview

Category	Subcategory
Device	AVD General Security
Group	Devices General Mail Teams
Organization	Applications Devices General Mail Phone Security
User	AVD General Mail Phone Security Userinfo

Device Runbooks

• AVD

  • Restart Host

  • Toggle Drain Mode

• General

  • Change Grouptag

  • Check Updatable Assets

  • Enroll Updatable Assets

  • Outphase Device

  • Remove Primary User

  • Rename Device

  • Unenroll Updatable Assets

  • Wipe Device

• Security

  • Enable Or Disable Device

  • Isolate Or Release Device

  • Reset Mobile Device Pin

  • Restrict Or Release Code Execution

  • Show Laps Password

Group Runbooks

• Devices

  • Check Updatable Assets

  • Unenroll Updatable Assets

• General

  • Add Or Remove Nested Group

  • Add Or Remove Owner

  • Add Or Remove User

  • Change Visibility

  • List All Members

  • List Owners

  • List User Devices

  • Remove Group

  • Rename Group

• Mail

  • Enable Or Disable External Mail

  • Show Or Hide In Address Book

• Teams

  • Archive Team

Organization Runbooks

• Applications

  • Add Application Registration

  • Delete Application Registration

  • Export Enterprise Application Users

  • List Inactive Enterprise Applications

  • Report Application Registration

  • Report Expiring Application Credentials (Scheduled)

  • Update Application Registration

• Devices

  • Add Autopilot Device

  • Add Device Via Corporate Identifier

  • Delete Stale Devices (Scheduled)

  • Get Bitlocker Recovery Key

  • Outphase Devices

  • Report Devices Without Primary User

  • Report Last Device Contact By Range

  • Report Stale Devices (Scheduled)

  • Report Users With More Than 5-Devices

  • Sync Device Serialnumbers To Entraid (Scheduled)

• General

  • Add Devices Of Users To Group (Scheduled)

  • Add Management Partner

  • Add Microsoft Store App Logos

  • Add Office365 Group

  • Add Or Remove Safelinks Exclusion

  • Add Or Remove Smartscreen Exclusion

  • Add Or Remove Trusted Site

  • Add Security Group

  • Add User

  • Add Viva Engange Community

  • Assign Groups By Template (Scheduled)

  • Bulk Delete Devices From Autopilot

  • Bulk Retire Devices From Intune

  • Check Aad Sync Status (Scheduled)

  • Check Assignments Of Devices

  • Check Assignments Of Groups

  • Check Assignments Of Users

  • Check Autopilot Serialnumbers

  • Check Device Onboarding Exclusion (Scheduled)

  • Enrolled Devices Report (Scheduled)

  • Export All Autopilot Devices

  • Export All Intune Devices

  • Export Cloudpc Usage (Scheduled)

  • Export Non Compliant Devices

  • Export Policy Report

  • Invite External Guest Users

  • List All Administrative Template Policies

  • List Group License Assignment Errors

  • Office365 License Report

  • Report Apple MDM Cert Expiry (Scheduled)

  • Report License Assignment (Scheduled)

  • Report Pim Activations (Scheduled)

  • Sync All Devices

• Mail

  • Add Distribution List

  • Add Equipment Mailbox

  • Add Or Remove Public Folder

  • Add Or Remove Teams Mailcontact

  • Add Or Remove Tenant Allow Block List

  • Add Room Mailbox

  • Add Shared Mailbox

  • Hide Mailboxes (Scheduled)

  • Set Booking Config

• Phone

  • Get Teams Phone Number Assignment

• Security

  • Add Defender Indicator

  • Backup Conditional Access Policies

  • List Admin Users

  • List Expiring Role Assignments

  • List Inactive Devices

  • List Inactive Users

  • List Information Protection Labels

  • List Pim Rolegroups Without Owners (Scheduled)

  • List Users By MFA Methods Count

  • List Vulnerable App Regs

  • Notify Changed CA Policies

User Runbooks

• AVD

  • User Signout

• General

  • Assign Groups By Template

  • Assign Or Unassign License

  • Assign Windows365

  • List Group Memberships

  • List Group Ownerships

  • List Manager

  • Offboard User Permanently

  • Offboard User Temporarily

  • Reprovision Windows365

  • Resize Windows365

  • Unassign Windows365

• Mail

  • Add Or Remove Email Address

  • Assign Owa Mailbox Policy

  • Convert To Shared Mailbox

  • Delegate Full Access

  • Delegate Send As

  • Delegate Send On Behalf

  • Hide Or Unhide In Addressbook

  • List Mailbox Permissions

  • List Room Mailbox Configuration

  • Remove Mailbox

  • Set Out Of Office

  • Set Room Mailbox Configuration

• Phone

  • Disable Teams Phone

  • Get Teams User Info

  • Grant Teams User Policies

  • Set Teams Permanent Call Forwarding

  • Set Teams Phone

• Security

  • Confirm Or Dismiss Risky User

  • Create Temporary Access Pass

  • Enable Or Disable Password Expiration

  • Reset Mfa

  • Reset Password

  • Revoke Or Restore Access

  • Set Or Remove Mobile Phone Mfa

• Userinfo

  • Rename User

  • Set Photo

  • Update User