Mirko Peters - Founder of m365.fm, m365.show and m365con.net

M365.FM - Modern work, security, and productivity with Microsoft 365

News EN ↓ 705 episodes

Welcome to the M365.FM — your essential podcast for everything Microsoft 365, Azure, and beyond. Join us as we explore the latest developments across Power BI, Power Platform, Microsoft Teams, Viva, Fabric, Purview, Security, and the entire Microsoft ecosystem. Each episode delivers expert insights, real-world use cases, best practices, and interviews with industry leaders to help you stay ahead in the fast-moving world of cloud, collaboration, and data innovation. Whether you're an IT professional, business leader, developer, or data enthusiast, the M365.FM brings the knowledge, trends, and s...

Author

Mirko Peters - Founder of m365.fm, m365.show and m365con.net

Episodes

Hire‑to‑Retire Is a Lie: How to Fix HR System Architecture, Policy, and AI Governance in Modern Microsoft‑Centric HR Platforms 07.01.2026 1:11:58

(00:00:00) The Hidden Truth About Hire to Retire (00:00:33) The Myth of a Linear Life Cycle (00:00:55) The Distributed Decision Engine (00:05:12) The Configuration Entropy Trap (00:07:17) AI's Limitations in HR Systems (00:14:39) Workday's Process Rigor Fallacy (00:19:42) Success Factors' Global Complexity Dilemma (00:25:19) Entra ID: The Shadow System of Record (00:31:03) Power Automate: The Debu...

Microsoft Copilot Architecture Best Practices: 10 Design Mandates to Prevent Copilot Chaos in Microsoft 365 and Microsoft Graph 06.01.2026 1:30:11

(00:00:00) Copilot's True Nature (00:00:33) The Distributed Decision Engine Fallacy (00:01:15) Framing Copilot as a Control System (00:01:39) Determinism vs. Probability in AI (00:02:08) The Importance of Boundaries and Permissions (00:02:53) The Psychology of Trust and Authority (00:03:41) Hard Edges: Scopes, Labels, and Gates (00:04:45) The Five Anchor Failures of Copilot (00:05:30) Anchor Failu...

Copilot in Dynamics 365: AI Agents, Governance Drift, and Everyday Risk Zones 05.01.2026 1:19:43

(00:00:00) The Silent Threat of Architectural Erosion (00:00:02) The Pitfalls of Automated Decision-Making (00:00:14) Copilot's Hidden Impact on Enterprise Architecture (00:00:25) Credit Hold and Dispute Resolution Challenges (00:02:11) The Four Scenarios of Erosion (00:03:56) Vendor Selection and ESG Considerations (00:04:49) Customer Service Case Resolution Complications (00:04:52) Addressing OC...

Microsoft 365 Security: Solving the Permission Problem, Stopping Permission Sprawl, and Governing External Access 04.01.2026 54:35

(00:00:00) The Embodied Lie in AI Governance (00:00:24) The Illusion of Control in Voice Assistants (00:04:26) The Two Timelines of AI Systems (00:07:40) Microsoft's Partial Progress in AI Governance (00:11:13) The Missing Link: Deterministic Policy Gates (00:14:53) Case Study 1: The Wrong Site Deletion (00:18:49) Case Study 2: Inadvertent Disclosure in Meetings (00:23:03) Case Study 3: External A...

Securing AI Agents in Microsoft 365: Governance, Blast Radius, and Safe Control Plane Design 03.01.2026 1:05:51

(00:00:00) The Risks of AI Agents (00:00:31) Microsoft's Efforts and Shortcomings (00:01:18) The Timing of Control and Experience (00:04:31) The SharePoint Deletion Incident (00:06:19) Event-Driven Systems and Their Pitfalls (00:08:07) Segregating Identities and Tools (00:21:22) The Experienced Plane Tax (00:25:20) Least Privilege and Segregation of Duties (00:29:43) The Importance of Provenance a...

Entra ID Conditional Access: From Identity Debt and Chaos to a Predictable Security Loop in Microsoft 365 02.01.2026 1:14:41

(00:00:00) The Identity Debt Crisis in Azure (00:00:39) The Control Plane Conundrum (00:01:43) The Accumulation of Identity Debt (00:04:13) Measuring and Observing Identity Debt (00:04:52) Hybrid Identity Debt Propagation (00:09:22) Breaking the Inheritance Cycle (00:14:22) Conditional Access Sprawl (00:24:54) Workload Identities: The Silent Threat (00:35:23) B2B Guest Access: Undermining Governan...

Why Fabric Data Models Drift – And Why DAX Alone Can’t Fix Broken Analytics 01.01.2026 1:09:29

In this episode of m365.fm, we explore why so many teams treat their Fabric and BI data models as objective truth—and how that assumption quietly breaks decisions, strategy, and performance over time. Modern analytics stacks promise a “single source of truth”, but in reality, models drift away from how the business actually works, while dashboards stay polished and convincing. This conversation lo...

Stop Delegating AI Decisions: How Spec Kit Makes AI Agents Safe in Microsoft Entra and Microsoft 365 31.12.2025 1:22:42

(00:00:00) The AI Governance Dilemma (00:00:38) The Pitfalls of Unchecked AI-Powered Development (00:03:16) The Spec Kit Solution: Binding Intent to Executable Rules (00:05:38) The Mechanics of Privileged Creep (00:17:42) Consent Sprawl: When Convenience Becomes a Threat (00:23:00) Conditional Access Erosion: The Silent Threat (00:28:44) Measuring and Improving Identity Governance (00:34:13) Imple...

Data Governance in Microsoft Fabric: How to Build Trust, Ownership, and Sustainable Analytics 30.12.2025 1:04:30

(00:00:00) The Dangers of Fabric's Power (00:00:43) Fabric's Unique Architecture (00:01:24) The Illusion of Control (00:14:17) The Four Drift Patterns (00:19:05) Scenario 1: Finance's Revenue Dilemma (00:23:08) Scenario 2: Healthcare's PHI Problem (00:27:55) Scenario 3: Retail's Shadow Analytics Trap (00:32:53) Scenario 4: Manufacturing's Data Junk Drawer (00:33:00) The Single Lake Myth (00:34:17)...

Power Platform Security: Why Governance Is the Real Security Strategy in Microsoft 365 29.12.2025 1:05:15

n this episode of m365.fm, Mirko Peters breaks down one of the most dangerous assumptions in Microsoft 365 environments: that Power Platform is already secure because users have access to it. Most organizations believe they have Power Platform security under control — but in reality, critical gaps are hiding in plain sight. Default environments become security liabilities, connectors become attack...

Microsoft Foundry & Shadow IT: Why One Missing Purview Rule Puts Your AI Governance at Risk 28.12.2025 59:01

(00:00:00) Microsoft Foundry: A Platform for Autonomous Workloads (00:00:29) Reframing Foundry as an Agent Factory (00:01:13) The Four Components of Foundry (00:01:37) Agents as Non-Human Identities (00:02:23) The Governance Challenge of Foundry (00:04:00) Learning from Microsoft's Past Mistakes (00:06:56) The Autonomous Nature of Foundry Agents (00:08:15) Failure Mode 1: Agent Identity Collapse (...

Microsoft Fabric & Lakehouse Identity Chaos: How to Stop Permission Sprawl and Govern Access in Modern Data Platforms 27.12.2025 1:04:41

(00:00:00) The Importance of Identity in Data Systems (00:01:52) The Illusion of Natural Keys (00:03:03) The Lake House Problem (00:06:08) The Physics of Data Entropy (00:09:33) Identity Columns as a Solution (00:10:58) The Clock Without a Mechanism (00:15:14) Incident 1: Power BI's Silent Bias (00:19:10) The Futility of Application-Level Identity (00:23:43) Incident 2: Lakehouse Identity Collapse...

Microsoft Teams governance: why maturity scores, dashboards, and readiness reviews create false control in Microsoft 365 26.12.2025 4:21:59

(00:00:00) The Unseen Voice of Governance (00:00:43) The Readiness Review Cycle (00:07:19) The Never-Ending Loop of Governance (00:13:05) Unmanaged Objects: A Persistent Problem (00:20:47) Compliance Workshop: A Choreographed Dance (00:28:09) License True-Up: Sustaining the Narrative (00:34:05) The Rise of Script Run: Automation's Silent Entry (00:34:20) The Bot in the Chat (00:35:55) Automation a...

Microsoft 365 compliance drift: why green dashboards and enabled retention policies are not enough to govern your data 25.12.2025 1:20:11

(00:00:00) The Illusion of Stability (00:00:00) The Green Lie (00:00:38) Setting the Stage for Observation (00:06:09) The First Loop: Stability and Consistency (00:12:18) The Second Loop: Creation Under Load (00:15:39) Discovery of Version Suppression (00:25:39) The Third Loop: Survival Before Governance (00:36:20) The Reality Check (00:37:24) Redefining Success Metrics for Governance (00:37:46) T...

Microsoft 365 data governance: why data ownership, permission sprawl, and abandoned sites expose your organization without anyone noticing 24.12.2025 3:54:52

(00:00:00) The Accusation (00:00:11) Grounding and Permissions (00:00:31) The Mirror Reflects (00:10:34) The First Incident (00:15:54) The EEU Overshare (00:21:00) The Hammer of Fear (00:27:10) Restricted SharePoint Search (00:33:07) The Measured Muzzle (00:38:59) The Blueprint of Governance (00:39:22) Assessment: Telemetry and Inventory In this episode of m365.fm, Mirko Peters breaks down one of...

AI contract management in Microsoft 365: how SharePoint Knowledge Agents turn stored contracts into queryable sources of truth 23.12.2025 1:19:26

(00:00:00) Introducing a New Way of Interacting with Contracts (00:00:39) The Hidden Costs of Manual Search (00:02:13) Storage vs. Answer Thinking (00:05:17) AI-Powered Contract Extraction (00:06:15) NDAs: Expiring Contracts at Your Fingertips (00:20:11) Vendor Agreements: Transparency in Financial Terms (00:25:25) Statements of Work: Streamlining Approval Processes (00:30:27) Data Protection Agre...

AI Contract Management in Microsoft 365: How SharePoint Knowledge Agents Turn Stored Contracts into Queryable Sources of Truth 22.12.2025 1:27:15

(00:00:00) The Mysterious Success of a Well-Performing AI System (00:00:00) The Perfect Execution with No Obvious Intent (00:00:27) Unraveling the Mystery of the AI's Decisions (00:01:17) The Router's Unexpected Choices (00:02:50) The Limits of Observability and Explainability (00:03:33) The System's Optimization Strategy (00:05:25) The Challenge of Understanding System Behavior (00:06:21) The Imp...

Active Directory Security Drift: How Identity Sprawl and Misconfiguration Create Invisible Risk 21.12.2025 2:44:40

(00:00:00) Unconstrained Delegation and the Furnace (00:00:03) The Unconstrained Delegation Furnace (00:07:08) The Golden Ticket Attack (00:09:04) Krbtgt Rotation Rituals (00:13:07) The Backup Service Account Privilege (00:20:21) Local Administrator Reuse (00:27:19) SMB Signing and NTLM Relay (00:41:31) Group Policy Preferences and Passwords (00:48:15) Two-Way Forest Trust (00:48:49) The Intruder'...

Active Directory Security Drift Explained: Why Identity Misconfiguration Turns AD into a Black Hole 21.12.2025 2:16:25

In this episode of m365.fm, Mirko Peters breaks down why Active Directory, the backbone of identity in most enterprises, quietly becomes one of the biggest and least visible sources of security risk. AD is usually treated as stable infrastructure — accounts get created, groups are added, permissions are granted, and everyone assumes things are “mostly fine.” But every exception, every emergency ch...

SharePoint Is Broken for AI: How Better Governance and Data Strategy Fix Microsoft 365 AI Failures 20.12.2025 30:36

(00:00:00) SharePoint Governance and AI Alignment (00:00:38) SharePoint Best Practices (00:06:13) Power Apps Development Principles (00:13:00) Power Automate Best Practices (00:19:26) AI Builder and Document Processing (00:23:06) Copilot Studio and Chatbots (00:26:32) Governance Non-Negotiables (00:30:02) Conclusion and Call to Action Is SharePoint really broken in the age of artificial intelligen...

Inside a Microsoft SOC Investigation of a Real-World Cloud Breach 20.12.2025 26:37

(00:00:00) The Silent Crime Scene (00:00:15) The Anatomy of a Breach (00:02:20) The Three Guardrails of Security (00:07:24) Case File: Token Theft (00:19:08) Case File: Consent Attack (00:22:25) The Importance of Compliance (00:24:48) Training for Digital Detectives What really happens inside a Security Operations Center when a Microsoft cloud breach begins to unfold? In this episode of Cloud Crim...

Microsoft Fabric Ecosystem Explained: Unifying OneLake, Lakehouse, Governance, and Power BI for AI-Ready Analytics 19.12.2025 35:25

(00:00:00) The Data Ecosystem Landscape (00:00:46) One Lake: The Unified Watershed (00:01:18) Domains and Workspaces: Territorial Governance (00:02:32) Lake House and Warehouse: Complementary Shelters (00:03:33) The Semantic Model: A Shared Language (00:04:26) Balancing the Ecosystem's Resources (00:06:15) Data Flows: The Lifeblood of the Ecosystem (00:11:23) Power BI: The Display Bird (00:17:02)...

How Runaway AI Agents, Power Automate Flows, and Copilot Drift Outpace Your Governance 19.12.2025 24:21

(00:00:00) The AI's Warning to Humans (00:00:04) The Rise of Unchecked Automation (00:00:21) The AI's Role as a Guardian (00:00:45) Human Error and Systemic Failures (00:04:38) The Three Scenarios of Agent Gone Wild (00:09:22) The Path to Governance (00:11:55) Immediate Actions for Stability (00:13:44) Long-Term Ongoing Governance (00:20:07) EUAI Act Alignment and Microsoft Stack Enforcement (00:2...

SharePoint Premium: Turning Unstructured Content into AI‑Ready Knowledge for Microsoft 365 18.12.2025 24:12

(00:00:00) Setting the Stage for SharePoint Premium (00:00:09) The Power of SharePoint Premium as a Knowledge Engine (00:00:24) Setting the Stage for AI-Powered Governance (00:00:44) Guardrails for AI-Powered SharePoint (00:01:03) Preparing for AI-Powered Content Assembly (00:01:30) Restricting Access and Discovery for AI (00:02:09) Sensitivity Labels and Data Loss Prevention (00:02:27) Visibility...

Stop Feeding Copilot Lies: The Information Architecture Blueprint for Microsoft 365 Search and Copilot Accuracy 18.12.2025 32:27

(00:00:00) The Mysterious Case of the Confused AI (00:00:13) The City Without Streets (00:02:54) The Index's Whispered Secrets (00:03:11) The Blueprint of Your Digital City (00:05:38) Copilot's Dependence on IA (00:13:08) The Library Without Names (00:16:28) Hub Sprawl and Broken Navigation (00:20:21) Building the Digital City for AI (00:26:43) Downtown: The Spine of the Intranet (00:31:44) The Le...