#admin 3 articles

• Exchange Online Admin API (the REST behind EXO V3) cannot be called from the browser — no CORS, and SPFx tokens lack Exchange.Managegotchas / graphadminapi/beta/{tenant}/InvokeCommand fails with 'Failed to fetch' even with a fake token; read Exchange config with an admin-run script and import, or use Graph message trace and mailbox reports
• Graph usage reports in the browser — the v1.0 CSV redirect is CORS-blocked, beta JSON worksgotchas / graphv1.0 302 to CSV dies on CORS; beta ?$format=application/json returns 200 from Graph; mind roles and concealed names
• SPO Management Shell one-liners every admin ends up needingsnippets / cliQuick admin answers — storage top 20, external sharing, deleted sites, lock state — no script file needed