Small, focused tools that just run in your browser.
No backend, no telemetry. You use your own account, your browser talks to Microsoft directly.
In this repo
ConditionalAccess Open source
Import, export and compare Conditional Access policies. Add name prefixes/suffixes, set policy mode per import item, resolve missing users/groups, and bootstrap with a starter baseline set.
SPOTrim Open source
Find stale SharePoint and OneDrive sites in your tenant, see who owns them, when they were last touched or viewed, and decide what to clean up.
DupedDevices Open source
Find duplicate device registrations in Entra ID, decide which one to keep, and disable or delete the rest. Optional grace period using extension attributes so you can disable now and delete safely later.
SPNRoleMgr Open source
Inspect or change Graph API permissions for any Service Principal or Managed Identity. NEW: Also manage Sites.Selected permissions for Sharepoint Sites, directly in your browser!
PermView Open source
Quick top-level permission viewer across Entra, SharePoint, OneDrive, Mailbox, Azure, Azure DevOps, Power BI and Power Platform. The fast first look before you reach for a deeper audit tool.
InactiveGuests Open source
Find dormant guest accounts in Entra ID, filtered by inactivity, redemption state and account age. Bulk disable, delete or restore them.
InactiveDevices Open source
Find dormant Entra devices using inactivity, OS, join type, Autopilot and managed status filters. Bulk disable, enable or delete selected devices.
SimpleMaester Open source
Browser-based port of Maester. Run M365 security baseline tests (EIDSCA, conditional access, role hardening) without installing PowerShell, and watch your posture trend over time.
SimpleZTA Open source
Browser-based Zero Trust Assessment companion for Microsoft 365. Run delegated Graph checks, track historical posture movement, and drill down into control-level evidence locally.
Other tools by Lieben Consultancy
DriftMaester GitHub
Plug & Play Azure Automation wrapper for Maester with continuous drift detection, automated alerting/reporting in HTML for Microsoft 365 security posture.
M365AutoLink GitHub
Automatically discovers SharePoint and Teams libraries and creates OneDrive shortcuts, with exclusion management and tray-based run controls.
M365AutoRevocate GitHub
Automated offboarding cleanup for Microsoft 365. Reacts to inactive, disabled or deleted users via Graph change notifications and runs the revocation actions you enable, all through a managed identity with a small admin web app.
M365Permissions External
Know who has what access in your tenant, at any level, at any point in time. Built for organisations that take permissions seriously.
WeatherRadius External
Pick a starting point and a date range, and find the spot with the best weather within driving or public transport distance. Great for sunny weekend escapes or getting away from hot city weather.