Updated 1mo ago
by OpenAdminOS
greybeard
Your senior Microsoft 365, Intune, and Entra admin, installed in the AI client you already use. Agent Skills plus MCP servers for Claude Code, Cursor, Codex, Gemini, and GitHub Copilot, with a human approval gate on every tenant write.
34 GitHub stars (34)
Steady at 34 stars — no new stars in the 16 days since Sep 30.
- 18 skills (18 skills found in its SKILL.md files)
- 1 forks (1 forks)
- 1mo ago last update (Last updated 1mo ago)
Install
Skills CLI
npx skills add OpenAdminOS/greybeard
Asks which skills and agents to install. Just one: npx skills add OpenAdminOS/greybeard --skill entra-app-credentials — add -g for every project.
Claude Code
git clone https://github.com/OpenAdminOS/greybeardcp -r "greybeard/.agents/skills/craft/entra-app-credentials" ~/.claude/skills/
Copies the entra-app-credentials skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add OpenAdminOS/greybeard
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
entra-app-credentials
Use when the user asks about Entra app registrations, service principals, client secrets, certificates, federated identity credentials, GitHub OIDC, secret-to-OIDC migration, bootstrap permissions, or credential rollback.
.agents/skills/craft/entra-app-credentials/SKILL.md on GitHub (opens in a new tab) -
graph-patterns
Use when the user needs Microsoft Graph mechanics, beta default behavior, explicit beta requests, pagination, batching, throttling, OData query design, or token-efficient call patterns.
.agents/skills/craft/graph-patterns/SKILL.md on GitHub (opens in a new tab) -
kql-authoring
Use when the user asks to write, tune, explain, debug, optimize, or convert KQL for Intune device query, Log Analytics, Sentinel, sign-in, audit, or compliance data.
.agents/skills/craft/kql-authoring/SKILL.md on GitHub (opens in a new tab) -
least-privilege-scopes
Use when the user needs minimum Microsoft Graph permissions, scope choices, admin-consent notes, over-permissioning review, or least-privilege access planning.
.agents/skills/craft/least-privilege-scopes/SKILL.md on GitHub (opens in a new tab) -
posture-script
Use when the user wants a complete script to check, audit, report, harden, export, or remediate Microsoft 365, Intune, Entra, or Graph posture offline.
.agents/skills/craft/posture-script/SKILL.md on GitHub (opens in a new tab) -
diagnose
Use when the user reports something broken, failing, or misbehaving in the tenant and needs structured incident triage.
.agents/skills/mentor/diagnose/SKILL.md on GitHub (opens in a new tab) -
grill-my-change
Use when the user asks to sanity-check, rehearse, pressure-test, or get grilled on a planned tenant change before executing it.
.agents/skills/mentor/grill-my-change/SKILL.md on GitHub (opens in a new tab) -
handoff
Use when the user wants a handover summary, shift-change notes, or a paste-ready recap of what this session investigated and decided.
.agents/skills/mentor/handoff/SKILL.md on GitHub (opens in a new tab) -
learn-my-tenant
Use when the user wants Greybeard to learn the tenant, onboard a new environment, or seed memory with naming conventions, rings, break-glass accounts, and change windows.
.agents/skills/mentor/learn-my-tenant/SKILL.md on GitHub (opens in a new tab) -
tenant-decisions
Use when the user asks why the tenant is configured a certain way, or wants to record the reason behind a configuration decision.
.agents/skills/mentor/tenant-decisions/SKILL.md on GitHub (opens in a new tab) -
ask-my-tenant
Use when the user poses a live tenant state question when no more specific Greybeard skill matches, including guest accounts, disabled accounts, or simple user and group counts.
.agents/skills/read/ask-my-tenant/SKILL.md on GitHub (opens in a new tab) -
conditional-access-review
Use when the user asks to review existing Conditional Access, audit CA policies, find report-only policies, find enabled policies that lack MFA enforcement, or verify emergency-account exclusions.
.agents/skills/read/conditional-access-review/SKILL.md on GitHub (opens in a new tab) -
entra-identity
Use when the user asks about Entra users, groups, memberships, dynamic rules, orphaned groups, naming hygiene, cleanup candidates, or identity inventory.
.agents/skills/read/entra-identity/SKILL.md on GitHub (opens in a new tab) -
intune-assignments
Use when the user asks what Intune apps, policies, configuration profiles, devices, or groups are assigned, targeted, excluded, conflicting, or missing.
.agents/skills/read/intune-assignments/SKILL.md on GitHub (opens in a new tab) -
intune-compliance
Use when the user asks why Intune devices are noncompliant, failing compliance, blocked, in grace period, or need compliance policy triage.
.agents/skills/read/intune-compliance/SKILL.md on GitHub (opens in a new tab) -
license-optimizer
Use when the user asks about license waste, unused seats, duplicate licenses, downgrade candidates, SKU utilization, or Microsoft 365 cost optimization.
.agents/skills/read/license-optimizer/SKILL.md on GitHub (opens in a new tab) -
tenant-pulse
Use when the user asks how healthy or secure the tenant is, says posture, risk, score, "how are we doing", or wants a scored Microsoft 365 tenant snapshot.
.agents/skills/read/tenant-pulse/SKILL.md on GitHub (opens in a new tab) -
change-plan
Use when the user proposes tenant writes or asks to create, update, delete, assign, disable, remediate, grant, revoke, or execute Microsoft Graph changes.
.agents/skills/write/change-plan/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.