PowerShell

Sites.Selected Without the Blind Spots: Governing Scoped App Permissions in SharePoint Online

Sites.Selected limits apps to the sites they need, but nobody tracks who granted what. PuntoBello SPO Permissions Governance adds self-service requests, owner approval, yearly recertification, automatic revocation and a scan for unmanaged grants.

Fabian Hutzli

Oct 7, 2026 · 16 min read

Whimsical forest scene with three gnomes at a stone bridge labelled Identity Transition: on the App Registration side, a gnome holds old keys beside a chest of secrets and tokens and a scroll listing client secret and certificate; in the middle, a gnome hands a glowing OIDC token scroll across the bridge; on the Managed Identity side, a gnome stands among shields reading No Secrets, Auto-Rotated, and Secure Access — symbolizing the move from stored credentials to federated identities.

Goodbye, Client Secrets: Passwordless CI/CD to SharePoint with App Registrations, Managed Identities, and Federated Credentials

How GitHub Actions, Azure DevOps, and GitLab CI/CD authenticate to Microsoft Entra ID and create SharePoint sites without a stored secret — workload identity federation with app registrations and managed identities, plus the PnP PowerShell and CLI for Microsoft 365 contributions that came out of building the demos.

Fabian Hutzli

Jul 27, 2026 · 17 min read

Whimsical enchanted forest scene with two gnomes wielding magical wands beside a giant tree. On the left a cloud holds scattered, disordered documents; on the right an organized bookshelf with glowing orbs — symbolizing the cleanup of old file versions into structured, well-governed storage.

SharePoint Online Storage Optimization: Cleaning Up the Red Category

A phased version-history cleanup of the largest Teams-connected SharePoint sites reclaimed 10.1 TB of storage — with reporting, owner communication, and governance built into the process.

Fabian Hutzli

Jun 29, 2026 · 8 min read

Azure Container App Job running SharePoint maintenance tasks on a scheduled basis.

Azure Container App Jobs: Run Maintenance Tasks Without the Overhead

How to use Azure Container App Jobs with PowerShell, managed identity, and Terraform to run scheduled Microsoft 365 governance checks — no secrets, no always-on infrastructure, no image rebuilds for script changes.

Fabian Hutzli

Apr 1, 2026 · 9 min read

A delivery pipeline platform for the Microsoft Power Platform, illustrating automated CI/CD stages from development through pre-production to production.

Building a Delivery Platform for the Microsoft Power Platform: Lessons from My Master’s Thesis

How I designed and built an automated delivery platform for Microsoft Power Platform as part of my master’s thesis — covering ALM, CI/CD with GitLab, quality gates, and real-world validation in an enterprise environment.

Fabian Hutzli

Mar 24, 2026 · 20 min read

Whimsical enchanted forest scene with two gnomes wielding magical wands beside a giant tree. The tree holds a cloud of scattered documents on the left side and an organized bookshelf with glowing orbs on the right, symbolizing storage optimization — transforming cluttered data into structured, well-managed information.

SharePoint Online Storage: Usage, Main Consumers, and Optimization Strategies

A real-world look at SharePoint Online storage management — from identifying the biggest consumers to optimizing version history and building a phased action plan for an 8,000-user tenant.

Fabian Hutzli

Feb 26, 2026 · 8 min read

Whimsical gnome illustration showing the evolution from manual scripting to modern cloud deployment, representing the progression of the PuntoBello Installer

Evolution of the PuntoBello Installer

We regularly evolve our internal tools as our projects, artefacts, and delivery requirements change. This post explains what has changed with the PuntoBello Installer since September 2024 and why the tool is now much more flexible than before.

Fabian Hutzli

Feb 4, 2026 · 4 min read

Authentication flow diagram with security keys, certificates, and login interfaces, illustrating the complex world of authentication mechanisms for PowerShell and Azure services

Navigating the Complex World of Login Mechanisms: Real-Life Insights with PnP.PowerShell

In this post, we’ll dive into the world of login mechanisms and explore how they work in real-life scenarios.

Fabian Hutzli

Nov 1, 2024 · 11 min read

Automated deployment pipeline with interconnected gears and workflows in a forest setting, representing the streamlined build and deployment process for SharePoint Framework solutions

Automate the Build- and Deployment Process with the PuntoBello Installer

If you’re working with SharePoint Framework (SPFx) solutions, you know how important it is to have a smooth deployment process. However, it can get tricky, especially when different environments require specific configurations.

Fabian Hutzli

Oct 1, 2024 · 9 min read

PuntoBello Blog