M365Documentation
3.7.0
Automatic Documentation of M365 to simplify the life of admins and consultants.
Minimum PowerShell version
7.0
Installation Options
Owners
Copyright
(c) 2026 Thomas Kurth. All rights reserved.
Package Details
Author(s)
- Thomas Kurth
Tags
Intune Windows M365 Documentation MEM MSGraph AzureAD EntraID ConditionalAccess
Functions
Connect-M365Doc Get-M365Doc Get-M365DocValidSection Invoke-M365DocTranslationUI New-M365DocAppRegistration Optimize-M365Doc Test-M365DocConnection Write-M365DocCsv Write-M365DocHTML Write-M365DocJson Write-M365DocMD Write-M365DocWord
Dependencies
This module has no dependencies.
Release Notes
3.7.0
- Skip empty or whitespace-only section and object headings in Word export while preserving their content.
- Resolve transposed Word object headings from displayName, Display Name, M_DisplayName, or M_Display Name, skipping titles that duplicate the section heading.
- Skip absent nested sections during documentation optimization, matching the existing top-level behavior when collectors return no data.
- Fix #85: Update Word export to the PSWriteOffice 1.0.2 API and require version 1.0.2 or later. Remove the concrete Word document parameter type dependency. Older PSWriteOffice versions are no longer supported; restart PowerShell after upgrading.
- Enforce the PSWriteOffice minimum version for direct module-script imports and load the manifest in local test scripts so dependency checks cannot be bypassed.
- Support PSWriteOffice 3.0.8 as well as 1.0.2 by updating the table of contents through the shared document API rather than the renamed cmdlet.
- Fix #88: Add User.Read.All, AuditLog.Read.All and Policy.Read.PermissionGrant application permissions for guest sign-in activity and Consent Governance documentation.
- Request both delegated and application permissions where available in New-M365DocAppRegistration using the live Graph permission catalog, validate that every required permission resolves, and fix application role consent assignment. Warn when permissions resolve only as delegated and cannot be used by app-only tokens.
- Existing app registrations must have the missing application permissions added and admin consent granted, followed by acquiring a new token; they are not automatically updated.
- Correct "sufficiant" to "sufficient" in the Microsoft Graph Forbidden warning.
- Continue tenant documentation when Microsoft Graph returns AadPremiumLicenseRequired, with a licensing-specific warning identifying the skipped request.
- Fix CAE endpoint 404 error as feature is no longer a seperate API endpoint
- Fix Cloud Print printer subsection titles being executed as commands instead of strings.
- Replace the retired Information Protection labels endpoint with the beta sensitivity labels API, using organization labels for app-only authentication and user labels for interactive authentication. Request InformationProtectionPolicy.Read for delegated access and skip unsupported US Government clouds with a warning.
- Add a Copilot component for Copilot policy settings, admin limited mode, and agent identity blueprints with communication configuration.
- Add AgentIdentityBlueprint.Read.All and AgentCommunicationConfiguration.ReadWrite.All to the application registration permissions for agent identity blueprint documentation.
To see the complete history, checkout the Release Notes on Github
FileList
- M365Documentation.nuspec
- Data\LabelTranslation\#microsoft.graph.androidDeviceOwnerScepCertificateProfile.json
- Data\LabelTranslation\#microsoft.graph.deviceEnrollmentWindowsHelloForBusinessConfiguration.json
- Data\LabelTranslation\#microsoft.graph.macOSCompliancePolicy.json
- Data\LabelTranslation\#microsoft.graph.softwareOathAuthenticationMethodConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windows81TrustedRootCertificate.json
- Data\LabelTranslation\#microsoft.graph.windowsWifiConfiguration.json
- Functions\Connect-M365Doc.ps1
- Functions\Write-M365DocMD.ps1
- Internal\Collector\AzureAD\Get-AADCrossTenantAccess.ps1
- Internal\Collector\AzureAD\Get-AADTermsOfUse.ps1
- Internal\Collector\InformationProtection\Get-MIPLabel.ps1
- Internal\Collector\Intune\Get-MdmDeviceHealthScript.ps1
- Internal\Collector\Intune\Get-MobileApp.ps1
- Internal\Collector\Windows365\Get-W365UserSetting.ps1
- Internal\Helper\Test-TokenExpiration.ps1
- M365Documentation.psd1
- Data\LabelTranslation\#microsoft.graph.androidDeviceOwnerTrustedRootCertificate.json
- Data\LabelTranslation\#microsoft.graph.directoryObject.json
- Data\LabelTranslation\#microsoft.graph.macOSCustomConfiguration.json
- Data\LabelTranslation\#microsoft.graph.targetedManagedAppConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windowsDefenderAdvancedThreatProtectionConfiguration.json
- Data\LabelTranslation\applePushNotificationCertificate.json
- Functions\Get-M365Doc.ps1
- Functions\Write-M365DocWord.ps1
- Internal\Collector\AzureAD\Get-AADDirectoryPimRole.ps1
- Internal\Collector\AzureAD\Helper\Add-ODataTypeToObject.ps1
- Internal\Collector\Intune\Get-MdmAdmxConfigurationProfile.ps1
- Internal\Collector\Intune\Get-MdmEnrollmentConfiguration.ps1
- Internal\Collector\Intune\Get-MobileAppConfiguration.ps1
- Internal\Helper\Format-MarkdownTableListStyle.ps1
- Internal\Output\Write-DocumentationCsvSection.ps1
- M365Documentation.psm1
- Data\LabelTranslation\#microsoft.graph.androidEasEmailProfileConfiguration.json
- Data\LabelTranslation\#microsoft.graph.editionUpgradeConfiguration.json
- Data\LabelTranslation\#microsoft.graph.macOSEndpointProtectionConfiguration.json
- Data\LabelTranslation\#microsoft.graph.temporaryAccessPassAuthenticationMethodConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windowsDeliveryOptimizationConfiguration.json
- Data\LabelTranslation\appleVPPCertificate.json
- Functions\Get-M365DocValidSection.ps1
- Internal\Collector\AzureAD\Get-AADAdministrativeUnit.ps1
- Internal\Collector\AzureAD\Get-AADDirectoryRole.ps1
- Internal\Collector\AzureAD\Helper\Get-AzureADApplicationName.ps1
- Internal\Collector\Intune\Get-MdmAppleConfiguration.ps1
- Internal\Collector\Intune\Get-MdmManagementSummary.ps1
- Internal\Collector\Intune\Get-MobileAppDetailed.ps1
- Internal\Helper\Format-MarkdownTableTableStyle.ps1
- Internal\Output\Write-DocumentationHTMLSection.ps1
- Data\Settings Definitions Export Mar-9 2024.csv
- Data\LabelTranslation\#microsoft.graph.androidGeneralDeviceConfiguration.json
- Data\LabelTranslation\#microsoft.graph.emailAuthenticationMethodConfiguration.json
- Data\LabelTranslation\#microsoft.graph.macOSExtensionsConfiguration.json
- Data\LabelTranslation\#microsoft.graph.voiceAuthenticationMethodConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windowsDomainJoinConfiguration.json
- Data\LabelTranslation\PartnerConfiguration.json
- Functions\Invoke-M365DocTranslationUI.ps1
- Internal\Collector\AzureAD\Get-AADAuthMethod.ps1
- Internal\Collector\AzureAD\Get-AADDomain.ps1
- Internal\Collector\AzureAD\Helper\Get-AzureADRole.ps1
- Internal\Collector\Intune\Get-MdmAutopilotProfile.ps1
- Internal\Collector\Intune\Get-MdmPartner.ps1
- Internal\Collector\Intune\Get-MobileAppManagement.ps1
- Internal\Helper\Get-M365DocOrderedSections.ps1
- Internal\Output\Write-DocumentationMDSection.ps1
- Data\Template.docx
- Data\LabelTranslation\#microsoft.graph.androidManagedAppProtection.json
- Data\LabelTranslation\#microsoft.graph.iosCompliancePolicy.json
- Data\LabelTranslation\#microsoft.graph.macOSGeneralDeviceConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windows10CompliancePolicy.json
- Data\LabelTranslation\#microsoft.graph.windowsHealthMonitoringConfiguration.json
- Data\LabelTranslation\windows10AndLater-securityTemplate-accountProtection.json
- Functions\New-M365DocAppRegistration.ps1
- Internal\Collector\AzureAD\Get-AADAuthMethodAdvanced.ps1
- Internal\Collector\AzureAD\Get-AADIdentityGovernance.ps1
- Internal\Collector\AzureAD\Helper\Get-AzureADUser.ps1
- Internal\Collector\Intune\Get-MdmCompliancePolicy.ps1
- Internal\Collector\Intune\Get-MdmPowerShellScript.ps1
- Internal\Collector\Intune\Helper\Get-AssignmentDetail.ps1
- Internal\Helper\Invoke-DocGraph.ps1
- Internal\Output\Write-DocumentationWordSection.ps1
- Data\TemplateHTML.html
- Data\LabelTranslation\#microsoft.graph.androidWorkProfileCompliancePolicy.json
- Data\LabelTranslation\#microsoft.graph.iosEasEmailProfileConfiguration.json
- Data\LabelTranslation\#microsoft.graph.macOSTrustedRootCertificate.json
- Data\LabelTranslation\#microsoft.graph.windows10CustomConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windowsIdentityProtectionConfiguration.json
- Data\LabelTranslation\windows10AndLater-securityTemplate-antivirus.json
- Functions\Optimize-M365Doc.ps1
- Internal\Collector\AzureAD\Get-AADBranding.ps1
- Internal\Collector\AzureAD\Get-AADIdentityProvider.ps1
- Internal\Collector\CloudPrint\Get-CPConnector.ps1
- Internal\Collector\Intune\Get-MdmConfigurationPolicy.ps1
- Internal\Collector\Intune\Get-MdmRole.ps1
- Internal\Collector\Intune\Helper\Get-AssignmentDetailSingle.ps1
- Internal\Helper\Invoke-EscapeMarkdown.ps1
- Internal\Output\Write-DocumentationWordTable.ps1
- Data\TemplateHTMLBody.html
- Data\LabelTranslation\#microsoft.graph.azureADWindowsAutopilotDeploymentProfile.json
- Data\LabelTranslation\#microsoft.graph.iosGeneralDeviceConfiguration.json
- Data\LabelTranslation\#microsoft.graph.managedAndroidStoreApp.json
- Data\LabelTranslation\#microsoft.graph.windows10EndpointProtectionConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windowsKioskConfiguration.json
- Data\LabelTranslation\windows10AndLater-securityTemplate-attackSurfaceReduction.json
- Functions\Test-M365DocConnection.ps1
- Internal\Collector\AzureAD\Get-AADConditionalAccess.ps1
- Internal\Collector\AzureAD\Get-AADManagementSummary.ps1
- Internal\Collector\CloudPrint\Get-CPPrinter.ps1
- Internal\Collector\Intune\Get-MdmConfigurationProfile.ps1
- Internal\Collector\Intune\Get-MdmSecurityBaseline.ps1
- Internal\Collector\Intune\Helper\Get-GroupInfo.ps1
- Internal\Helper\Invoke-TranslateSimple.ps1
- Internal\Translation\Convert-CamelCaseToDisplayName.ps1
- Data\LabelTranslation\#microsoft.graph.activeDirectoryWindowsAutopilotDeploymentProfile.json
- Data\LabelTranslation\#microsoft.graph.builtInIdentityProvider.json
- Data\LabelTranslation\#microsoft.graph.iosManagedAppProtection.json
- Data\LabelTranslation\#microsoft.graph.omaSettingString.json
- Data\LabelTranslation\#microsoft.graph.windows10EnrollmentCompletionPageConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windowsPhone81CompliancePolicy.json
- Data\LabelTranslation\windows10AndLater-securityTemplate-endpointDetectionReponse.json
- Functions\Write-M365DocCsv.ps1
- Internal\Collector\AzureAD\Get-AADConditionalAccessAdvanced.ps1
- Internal\Collector\AzureAD\Get-AADOrganization.ps1
- Internal\Collector\Copilot\Get-CopilotAdminLimitedMode.ps1
- Internal\Collector\Intune\Get-MdmDeviceAssignmentFilter.ps1
- Internal\Collector\Intune\Get-MdmShellScript.ps1
- Internal\Collector\Windows365\Get-W365Image.ps1
- Internal\Helper\Invoke-TransponseObject.ps1
- Internal\Translation\Format-MsGraphData.ps1
- Data\LabelTranslation\#microsoft.graph.androidCompliancePolicy.json
- Data\LabelTranslation\#microsoft.graph.deviceEnrollmentLimitConfiguration.json
- Data\LabelTranslation\#microsoft.graph.iosScepCertificateProfile.json
- Data\LabelTranslation\#microsoft.graph.sharedPCConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windows10GeneralConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windowsRestoreDeviceEnrollmentConfiguration.json
- Dll\M365Doc.UI.dll
- Functions\Write-M365DocHTML.ps1
- Internal\Collector\AzureAD\Get-AADConditionalAccessSplit.ps1
- Internal\Collector\AzureAD\Get-AADPolicy.ps1
- Internal\Collector\Copilot\Get-CopilotAgentIdentityBlueprint.ps1
- Internal\Collector\Intune\Get-MdmDeviceCategory.ps1
- Internal\Collector\Intune\Get-MdmTermsAndCondition.ps1
- Internal\Collector\Windows365\Get-W365OnPremConnection.ps1
- Internal\Helper\Set-AzureADAppPermission.ps1
- Internal\Translation\Optimize-M365DocSection.ps1
- Data\LabelTranslation\#microsoft.graph.androidDeviceOwnerGeneralDeviceConfiguration.json
- Data\LabelTranslation\#microsoft.graph.deviceEnrollmentPlatformRestrictionsConfiguration.json
- Data\LabelTranslation\#microsoft.graph.iosTrustedRootCertificate.json
- Data\LabelTranslation\#microsoft.graph.smsAuthenticationMethodConfiguration.json
- Data\LabelTranslation\#microsoft.graph.windows81SCEPCertificateProfile.json
- Data\LabelTranslation\#microsoft.graph.windowsUpdateForBusinessConfiguration.json
- Dll\Newtonsoft.Json.dll
- Functions\Write-M365DocJson.ps1
- Internal\Collector\AzureAD\Get-AADConsentGovernance.ps1
- Internal\Collector\AzureAD\Get-AADSubscription.ps1
- Internal\Collector\Copilot\Get-CopilotPolicySetting.ps1
- Internal\Collector\Intune\Get-MdmDeviceComplianceScript.ps1
- Internal\Collector\Intune\Get-MdmWindowsUpdate.ps1
- Internal\Collector\Windows365\Get-W365ProvisionProfile.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 3.7.0 (current version) | 29 | 10/9/2026 |
| 3.6.0 | 3,329 | 3/15/2026 |
| 3.5.0 | 2,184 | 10/22/2025 |
| 3.5.0-alpha | 44 | 10/10/2025 |
| 3.4.3 | 417 | 9/30/2025 |
| 3.4.2 | 4,109 | 5/6/2025 |
| 3.4.1 | 945 | 3/28/2025 |
| 3.4.0 | 232 | 3/24/2025 |
| 3.3.1 | 141 | 3/23/2025 |
| 3.3.0 | 102,677 | 4/7/2024 |
| 3.2.2 | 13,698 | 2/18/2024 |
| 3.2.1 | 14,609 | 7/22/2023 |
| 3.2.0 | 23 | 7/21/2023 |
| 3.1.2 | 3,828 | 10/26/2021 |
| 3.1.0 | 411 | 8/8/2021 |
| 3.0.3 | 305 | 5/26/2021 |
| 3.0.2 | 81 | 5/25/2021 |
| 3.0.1-alpha | 55 | 4/26/2021 |
| 3.0.0-alpha | 34 | 4/21/2021 |