diff --git a/.vscode/GetTestCoverage.ps1 b/.vscode/GetTestCoverage.ps1 index 458df495a2..0b3a88ff68 100644 --- a/.vscode/GetTestCoverage.ps1 +++ b/.vscode/GetTestCoverage.ps1 @@ -2,31 +2,38 @@ param( [Parameter(Mandatory = $true)] [string] - $UnitTestFilePath, - - [Parameter(Mandatory = $true)] - [string] - $CmdletModule = (Join-Path -Path $PSScriptRoot ` - -ChildPath '..\Stubs\Microsoft365.psm1' ` - -Resolve) + $UnitTestFilePath ) -if ($UnitTestFilePath.EndsWith('Tests.ps1')) -{ +$moduleName = 'Pester' +$minVersion = '5.5.0' - $pesterParameters = @{ - Path = $unitTestFilePath - Parameters = @{ - CmdletModule = $CmdletModule - } - } +$module = Get-Module -ListAvailable | Where-Object { $_.Name -eq $moduleName -and $_.Version -ge $minVersion } +if ($module -ne $null) +{ + Write-Output "Module $moduleName with version greater than or equal to $minVersion found." +} +else +{ + Write-Output "Module $moduleName with version greater than or equal to $minVersion not found." + Write-Output 'Please install the module using the following command:' + Write-Output "Install-Module -Name $moduleName -MinimumVersion $minVersion" + return +} + +if ($UnitTestFilePath.EndsWith('Tests.ps1')) +{ $unitTest = Get-Item -Path $UnitTestFilePath $unitTestName = "$($unitTest.Name.Split('.')[1])" - $unitTestFilePath = (Join-Path -Path $PSScriptRoot ` + $coveragePath = (Join-Path -Path $PSScriptRoot ` -ChildPath "..\Modules\Microsoft365DSC\DSCResources\MSFT_$($unitTestName)\MSFT_$($unitTestName).psm1" ` -Resolve) - Invoke-Pester -Script $pesterParameters -CodeCoverage $UnitTestFilePath -Verbose + $config = New-PesterConfiguration + $config.Run.Path = $UnitTestFilePath + $config.CodeCoverage.Enabled = $true + $config.CodeCoverage.Path = $coveragePath + Invoke-Pester -Configuration $config } diff --git a/.vscode/launch.json b/.vscode/launch.json index 3bd859a536..1258adeb13 100644 --- a/.vscode/launch.json +++ b/.vscode/launch.json @@ -6,9 +6,7 @@ "request": "launch", "name": "Run current unit test", "script": "${file}", - "args": [ - "${workspaceRoot}/Tests/Unit/Stubs/Microsoft365.psm1" - ], + "args": [], "cwd": "${file}", "createTemporaryIntegratedConsole": true }, @@ -18,10 +16,25 @@ "name": "Get current unit test code overage", "script": "${workspaceRoot}/.vscode/GetTestCoverage.ps1", "args": [ - "${file}", - "${workspaceRoot}/Tests/Unit/Stubs/Microsoft365.psm1" + "${file}" ], "createTemporaryIntegratedConsole": true + }, + { + "type": "PowerShell", + "request": "launch", + "name": "Run all QA tests", + "script": "Import-Module '${workspaceRoot}/Tests/TestHarness.psm1'; $QaResults = Invoke-QualityChecksHarness ", + "args": [], + "createTemporaryIntegratedConsole": true + }, + { + "type": "PowerShell", + "request": "launch", + "name": "Run all Unit Tests", + "script": "Import-Module '${workspaceRoot}/Tests/TestHarness.psm1'; $UnitResults = Invoke-TestHarness", + "args": [], + "createTemporaryIntegratedConsole": true } ] } diff --git a/CHANGELOG.md b/CHANGELOG.md index ccf854bd31..5cef4b5fcd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,70 @@ # Change log for Microsoft365DSC + +# 1.24.228.1 + +* AADApplication + * Show current values of resource in Test-TargetResource +* AADAuthorizationPolicy + * Show current values of resource in Test-TargetResource +* AADConditionalAccessPolicy + * Improved verbose logging to show that items are being skipped. + * Show current values of resource in Test-TargetResource +* AADExternalIdentityPolicy + * Show current values of resource in Test-TargetResource +* AADGroup + * Fixed issue with single quotes in the display name. + FIXES [#4358](https://github.com/microsoft/Microsoft365DSC/issues/4358) + * Show current values of resource in Test-TargetResource +* AADGroupLifecyclePolicy + * Show current values of resource in Test-TargetResource +* AADGroupsNamingPolicy + * Show current values of resource in Test-TargetResource +* AADGroupsSettings + * Show current values of resource in Test-TargetResource +* AADNamedLocationPolicy + * Show current values of resource in Test-TargetResource +* AADRoleDefinition + * Show current values of resource in Test-TargetResource +* AADRoleSetting + * Show current values of resource in Test-TargetResource +* AADSecurityDefaults + * Show current values of resource in Test-TargetResource +* AADServicePrincipal + * Show current values of resource in Test-TargetResource +* AADTenantDetails + * Show current values of resource in Test-TargetResource +* AADTokenLifetimePolicy + * Show current values of resource in Test-TargetResource +* EXOActiveSyncDeviceAccessRule + * Remove extra property GUID that is stopping EXO integration tests from + running +* IntuneDeviceConfigurationScepCertificatePolicyWindows10 + * Fixes an issue where the keyUsage property format was not correctly handled +* IntuneExploitProtectionPolicyWindows10SettingCatalog + * Fix update and removal of resource when Identity is from another tenant + FIXES [#3962](https://github.com/microsoft/Microsoft365DSC/issues/3962) +* SPOAccessControlSettings + * Added support for the ConditionalAccessPolicy parameter based on the PNP Module +* Teams resources + * Updated required application permissions to support [Application Based Authentication](https://learn.microsoft.com/en-us/microsoftteams/teams-powershell-application-authentication) +* TeamsCallQueue + * Reduce the number of Calls for Export using new cache pattern + FIXES [[#4191](https://github.com/microsoft/Microsoft365DSC/issues/4192)] +* TeamsGuestMeetingConfiguration + * Added the missing parameter AllowTranscription. + FIXES [#4363](https://github.com/microsoft/Microsoft365DSC/issues/4363) +* TeamsTeam + * Corrected Parameters for Graph Commands when creating a new Team + FIXES [#4383](https://github.com/microsoft/Microsoft365DSC/issues/4383) +* MISC + * M365DSCDRGUtil + Add new parameter for customizable assignment identifier + * M365DSCUtil + Change heuristics on how to find the mandatory key of the resources to + include them as part of the ResourceInstanceName during their export + FIXES [#4333](https://github.com/microsoft/Microsoft365DSC/issues/4333) + # 1.24.221.1 * AADApplication @@ -72,8 +137,8 @@ * AADConditionalAccessPolicy * Removed invalid empty string value that was added to the validate set of two parameters. - * Updated permission reference for app-onlzy authentication. - FIXES [[#3329](https://github.com/microsoft/Microsoft365DSC/issues/3329)] + * Updated permission reference for app-only authentication. + FIXES [#3329](https://github.com/microsoft/Microsoft365DSC/issues/3329) * AADRoleEligibilityScheduleRequest * Fixed an issue where an error was thrown if no requests were found instead of simply returning the Null object. @@ -81,8 +146,9 @@ * Fix handling of DisplayName property in comparison FIXES [#4019](https://github.com/microsoft/Microsoft365DSC/issues/4019) * AADUser - * Fixed and issue where an user would be created even if the resrouce was set to absent. - FIXES [[#4265](https://github.com/microsoft/Microsoft365DSC/issues/4265)] + * Fixed and issue where an user would be created even if the resource was set + to absent. + FIXES [#4265](https://github.com/microsoft/Microsoft365DSC/issues/4265) * EXOMobileDeviceMailboxPolicy * Fixes an issue where an empty MinPasswordLength value was always passed down to the update logic flow. @@ -124,6 +190,7 @@ * Fix IntuneDeviceEnrolllmentPlatformRestriction comparison in report FIXES [#4291](https://github.com/microsoft/Microsoft365DSC/issues/4291) * Added new QA test to check for missing description in resource schema + * Added new QA test to check for falsely assigned write-premissions in settings.json # 1.24.207.2 @@ -143,7 +210,7 @@ * SCDLPComplianceRule * Properly escapes fancy quotes in the Get method. * TeamsMeetingPolicy - * Ignore the AllowUserToJoinExternalMeeting parameterfor drift evaluation + * Ignore the AllowUserToJoinExternalMeeting parameter for drift evaluation since it doesn't do anything based on official documentation. * DEPENDENCIES * Updated Microsoft.PowerApps.Administration.PowerShell to version 2.0.180. diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADApplication/MSFT_AADApplication.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADApplication/MSFT_AADApplication.psm1 index 290621c0ba..4dbd739804 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADApplication/MSFT_AADApplication.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADApplication/MSFT_AADApplication.psm1 @@ -813,6 +813,7 @@ function Test-TargetResource Write-Verbose -Message 'No Permissions exist for the current Azure AD App and no permissions were specified' } } + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADAuthorizationPolicy/MSFT_AADAuthorizationPolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADAuthorizationPolicy/MSFT_AADAuthorizationPolicy.psm1 index 6559de3f37..ec4a07d6e9 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADAuthorizationPolicy/MSFT_AADAuthorizationPolicy.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADAuthorizationPolicy/MSFT_AADAuthorizationPolicy.psm1 @@ -489,6 +489,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADConditionalAccessPolicy/MSFT_AADConditionalAccessPolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADConditionalAccessPolicy/MSFT_AADConditionalAccessPolicy.psm1 index c62d6a3aca..3f5d7451f5 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADConditionalAccessPolicy/MSFT_AADConditionalAccessPolicy.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADConditionalAccessPolicy/MSFT_AADConditionalAccessPolicy.psm1 @@ -31,7 +31,7 @@ function Get-TargetResource $ApplicationsFilter, [Parameter()] - [ValidateSet("include", "exclude")] + [ValidateSet('include', 'exclude')] [System.String] $ApplicationsFilterMode, @@ -300,7 +300,8 @@ function Get-TargetResource } catch { - New-M365DSCLogEntry -Message 'Error retrieving data:' ` + $message = "Couldn't find IncludedUser '$IncludeUserGUID', that is defined in policy '$PolicyDisplayName'. Skipping user." + New-M365DSCLogEntry -Message $message ` -Exception $_ ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -334,8 +335,9 @@ function Get-TargetResource } catch { - $message = "Couldn't find user $ExcludeUserGUID , that is defined in policy $PolicyDisplayName" + $message = "Couldn't find ExcludedUser '$ExcludeUserGUID', that is defined in policy '$PolicyDisplayName'. Skipping user." New-M365DSCLogEntry -Message $message ` + -Exception $_ ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` -Credential $Credential @@ -366,8 +368,9 @@ function Get-TargetResource } catch { - $message = "Couldn't find Group $IncludeGroupGUID , that is defined in policy $PolicyDisplayName" + $message = "Couldn't find IncludedGroup '$IncludeGroupGUID', that is defined in policy '$PolicyDisplayName'. Skipping group." New-M365DSCLogEntry -Message $message ` + -Exception $_ ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` -Credential $Credential @@ -393,8 +396,9 @@ function Get-TargetResource } catch { - $message = "Couldn't find Group $ExcludeGroupGUID , that is defined in policy $PolicyDisplayName" + $message = "Couldn't find ExcludedGroup '$ExcludeGroupGUID', that is defined in policy '$PolicyDisplayName'. Skipping group." New-M365DSCLogEntry -Message $message ` + -Exception $_ ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` -Credential $Credential @@ -426,7 +430,7 @@ function Get-TargetResource { if ($null -eq $rolelookup[$IncludeRoleGUID]) { - $message = "Couldn't find role $IncludeRoleGUID , couldn't add to policy $PolicyDisplayName" + $message = "Couldn't find IncludedRole '$IncludeRoleGUID', that is defined in policy '$PolicyDisplayName'. Skipping role." New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -446,7 +450,7 @@ function Get-TargetResource { if ($null -eq $rolelookup[$ExcludeRoleGUID]) { - $message = "Couldn't find role $ExcludeRoleGUID , couldn't add to policy $PolicyDisplayName" + $message = "Couldn't find ExcludedRole '$ExcludeRoleGUID', that is defined in policy '$PolicyDisplayName'. Skipping role." New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -576,7 +580,7 @@ function Get-TargetResource $AuthenticationStrengthValue = $null if ($null -ne $Policy.GrantControls -and $null -ne $Policy.GrantControls.AuthenticationStrength -and ` - $null -ne $Policy.GrantControls.AuthenticationStrength.Id) + $null -ne $Policy.GrantControls.AuthenticationStrength.Id) { $strengthPolicy = Get-MgBetaPolicyAuthenticationStrengthPolicy -AuthenticationStrengthPolicyId $Policy.GrantControls.AuthenticationStrength.Id if ($null -ne $strengthPolicy) @@ -591,8 +595,8 @@ function Get-TargetResource foreach ($class in $Policy.Conditions.Applications.IncludeAuthenticationContextClassReferences) { $classReference = Get-MgBetaIdentityConditionalAccessAuthenticationContextClassReference ` - -AuthenticationContextClassReferenceId $class ` - -ErrorAction SilentlyContinue + -AuthenticationContextClassReferenceId $class ` + -ErrorAction SilentlyContinue if ($null -ne $classReference) { $AuthenticationContextsValues += $classReference.DisplayName @@ -678,9 +682,9 @@ function Get-TargetResource CertificateThumbprint = $CertificateThumbprint Managedidentity = $ManagedIdentity.IsPresent } + Write-Verbose -Message "Get-TargetResource Result: `n $(Convert-M365DscHashtableToString -Hashtable $result)" return $result - } function Set-TargetResource @@ -715,7 +719,7 @@ function Set-TargetResource $ApplicationsFilter, [Parameter()] - [ValidateSet("include", "exclude")] + [ValidateSet('include', 'exclude')] [System.String] $ApplicationsFilterMode, @@ -947,18 +951,16 @@ function Set-TargetResource #create Conditions object Write-Verbose -Message 'Set-Targetresource: create Conditions object' $conditions = @{ - Applications = @{ - } - Users = @{ - } + Applications = @{} + Users = @{} } #create and provision Application Condition object Write-Verbose -Message 'Set-Targetresource: create Application Condition object' - if ($currentParameters.ContainsKey("IncludeApplications")) + if ($currentParameters.ContainsKey('IncludeApplications')) { $conditions.Applications.Add('IncludeApplications', $IncludeApplications) } - if ($currentParameters.ContainsKey("ExcludeApplications")) + if ($currentParameters.ContainsKey('ExcludeApplications')) { $conditions.Applications.Add('ExcludeApplications', $ExcludeApplications) } @@ -968,7 +970,7 @@ function Set-TargetResource rule = $ApplicationsFilter mode = $ApplicationsFilterMode } - $conditions.Applications.Add("ApplicationFilter", $appFilterValue) + $conditions.Applications.Add('ApplicationFilter', $appFilterValue) } if ($IncludeUserActions) { @@ -981,7 +983,7 @@ function Set-TargetResource $classReferences = Get-MgBetaIdentityConditionalAccessAuthenticationContextClassReference -ErrorAction SilentlyContinue foreach ($authContext in $AuthenticationContexts) { - $currentClassId = $classReferences | Where-Object -FilterScript {$_.DisplayName -eq $authContext} + $currentClassId = $classReferences | Where-Object -FilterScript { $_.DisplayName -eq $authContext } if ($null -ne $currentClassId) { $AuthenticationContextsValues += $currentClassId.Id @@ -1018,7 +1020,7 @@ function Set-TargetResource } if ($null -eq $userguid) { - $message = "Couldn't find user $includeuser , couldn't add to policy $DisplayName" + $message = "Couldn't find user '$includeuser', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1065,7 +1067,7 @@ function Set-TargetResource } if ($null -eq $userguid) { - $message = "Couldn't find user $excludeuser , couldn't add to policy $DisplayName" + $message = "Couldn't find user '$excludeuser', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1110,7 +1112,7 @@ function Set-TargetResource } if ($GroupLookup.Length -gt 1) { - $message = "Duplicate group found with displayname $includegroup , couldn't add to policy $DisplayName" + $message = "Duplicate group found with displayname '$includegroup', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1119,7 +1121,7 @@ function Set-TargetResource } elseif ($null -eq $GroupLookup) { - $message = "Couldn't find group $includegroup , couldn't add to policy $DisplayName" + $message = "Couldn't find group '$includegroup', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1128,7 +1130,7 @@ function Set-TargetResource } else { - Write-Verbose -Message 'adding group to includegroups' + Write-Verbose -Message 'Adding group to includegroups' $conditions.Users.IncludeGroups += $GroupLookup.Id } } @@ -1160,7 +1162,7 @@ function Set-TargetResource } if ($GroupLookup.Length -gt 1) { - $message = "Duplicate group found with displayname $ExcludeGroup , couldn't add to policy $DisplayName" + $message = "Duplicate group found with displayname '$ExcludeGroup', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1169,7 +1171,7 @@ function Set-TargetResource } elseif ($null -eq $GroupLookup) { - $message = "Couldn't find group $ExcludeGroup , couldn't add to policy $DisplayName" + $message = "Couldn't find group '$ExcludeGroup', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1178,7 +1180,7 @@ function Set-TargetResource } else { - Write-Verbose -Message 'adding group to ExcludeGroups' + Write-Verbose -Message 'Adding group to ExcludeGroups' $conditions.Users.ExcludeGroups += $GroupLookup.Id } } @@ -1203,7 +1205,7 @@ function Set-TargetResource { if ($null -eq $rolelookup[$IncludeRole]) { - $message = "Couldn't find role $IncludeRole , couldn't add to policy $DisplayName" + $message = "Couldn't find role '$IncludeRole', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1237,7 +1239,7 @@ function Set-TargetResource { if ($null -eq $rolelookup[$ExcludeRole]) { - $message = "Couldn't find role $ExcludeRole , couldn't add to policy $DisplayName" + $message = "Couldn't find role '$ExcludeRole', couldn't add to policy '$DisplayName'" New-M365DSCLogEntry -Message $message ` -Source $($MyInvocation.MyCommand.Source) ` -TenantId $TenantId ` @@ -1507,12 +1509,12 @@ function Set-TargetResource } if ($AuthenticationStrength) { - $strengthPolicy = Get-MgBetaPolicyAuthenticationStrengthPolicy | Where-Object -FilterScript {$_.DisplayName -eq $AuthenticationStrength} -ErrorAction SilentlyContinue + $strengthPolicy = Get-MgBetaPolicyAuthenticationStrengthPolicy | Where-Object -FilterScript { $_.DisplayName -eq $AuthenticationStrength } -ErrorAction SilentlyContinue if ($null -ne $strengthPolicy) { $authenticationStrengthInstance = @{ id = $strengthPolicy.Id - "@odata.type" = "#microsoft.graph.authenticationStrengthPolicy" + '@odata.type' = '#microsoft.graph.authenticationStrengthPolicy' } $GrantControls.Add('authenticationStrength', $authenticationStrengthInstance) } @@ -1575,7 +1577,7 @@ function Set-TargetResource } else { - $sessioncontrols.SignInFrequency.Remove("type") | Out-Null + $sessioncontrols.SignInFrequency.Remove('type') | Out-Null } if ($SignInFrequencyValue -gt 0) { @@ -1583,7 +1585,7 @@ function Set-TargetResource } else { - $sessioncontrols.SignInFrequency.Remove("value") | Out-Null + $sessioncontrols.SignInFrequency.Remove('value') | Out-Null } $sessioncontrols.SignInFrequency.frequencyInterval = $SignInFrequencyInterval } @@ -1649,9 +1651,9 @@ function Set-TargetResource else { New-M365DSCLogEntry -Message 'Error creating new policy:' ` - -Source $($MyInvocation.MyCommand.Source) ` - -TenantId $TenantId ` - -Credential $Credential + -Source $($MyInvocation.MyCommand.Source) ` + -TenantId $TenantId ` + -Credential $Credential Write-Verbose -Message 'Set-Targetresource: Failed creating new policy. At least a user rule, application rule and grant or session control is required' } @@ -1674,7 +1676,7 @@ function Set-TargetResource Write-Verbose -Message "Set-Targetresource: Failed deleting policy $DisplayName" } } - Write-Verbose -Message "Set-Targetresource: finished processing Policy $Displayname" + Write-Verbose -Message "Set-Targetresource: Finished processing Policy $Displayname" } function Test-TargetResource @@ -1710,7 +1712,7 @@ function Test-TargetResource $ApplicationsFilter, [Parameter()] - [ValidateSet("include", "exclude")] + [ValidateSet('include', 'exclude')] [System.String] $ApplicationsFilterMode, @@ -1912,6 +1914,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADEntitlementManagementConnectedOrganization/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_AADEntitlementManagementConnectedOrganization/settings.json index 6dbd672a14..3a9096b509 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADEntitlementManagementConnectedOrganization/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADEntitlementManagementConnectedOrganization/settings.json @@ -15,9 +15,6 @@ "read": [ { "name": "EntitlementManagement.Read.All" - }, - { - "name": "EntitlementManagement.ReadWrite.All" } ], "update": [ @@ -33,9 +30,6 @@ "read": [ { "name": "EntitlementManagement.Read.All" - }, - { - "name": "EntitlementManagement.ReadWrite.All" } ], "update": [ diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADExternalIdentityPolicy/MSFT_AADExternalIdentityPolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADExternalIdentityPolicy/MSFT_AADExternalIdentityPolicy.psm1 index 889b914f14..05d6fb57c5 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADExternalIdentityPolicy/MSFT_AADExternalIdentityPolicy.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADExternalIdentityPolicy/MSFT_AADExternalIdentityPolicy.psm1 @@ -241,6 +241,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroup/MSFT_AADGroup.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroup/MSFT_AADGroup.psm1 index c000517482..f7462b3563 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroup/MSFT_AADGroup.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroup/MSFT_AADGroup.psm1 @@ -129,9 +129,9 @@ function Get-TargetResource Write-Verbose -Message 'GroupID was specified' try { - if ($null -ne $Script:exportedGroups-and $Script:ExportMode) + if ($null -ne $Script:exportedGroups -and $Script:ExportMode) { - $Group = $Script:exportedGroups | Where-Object -FilterScript {$_.Id -eq $Id} + $Group = $Script:exportedGroups | Where-Object -FilterScript { $_.Id -eq $Id } } else { @@ -141,13 +141,14 @@ function Get-TargetResource catch { Write-Verbose -Message "Couldn't get group by ID, trying by name" - if ($null -ne $Script:exportedGroups-and $Script:ExportMode) + if ($null -ne $Script:exportedGroups -and $Script:ExportMode) { - $Group = $Script:exportedGroups | Where-Object -FilterScript {$_.DisplayName -eq $DisplayName} + $Group = $Script:exportedGroups | Where-Object -FilterScript { $_.DisplayName -eq $DisplayName } } else { - $Group = Get-MgGroup -Filter "DisplayName eq '$DisplayName'" -ErrorAction Stop + $filter = "DisplayName eq '$DisplayName'" -replace "'", "''" + $Group = Get-MgGroup -Filter $filter -ErrorAction Stop } if ($Group.Length -gt 1) { @@ -159,13 +160,14 @@ function Get-TargetResource { Write-Verbose -Message 'Id was NOT specified' ## Can retreive multiple AAD Groups since displayname is not unique - if ($null -ne $Script:exportedGroups-and $Script:ExportMode) + if ($null -ne $Script:exportedGroups -and $Script:ExportMode) { - $Group = $Script:exportedGroups | Where-Object -FilterScript {$_.DisplayName -eq $DisplayName} + $Group = $Script:exportedGroups | Where-Object -FilterScript { $_.DisplayName -eq $DisplayName } } else { - $Group = Get-MgGroup -Filter "DisplayName eq '$DisplayName'" -ErrorAction Stop + $filter = "DisplayName eq '$DisplayName'" -replace "'", "''" + $Group = Get-MgGroup -Filter $filter -ErrorAction Stop } if ($Group.Length -gt 1) { @@ -643,11 +645,11 @@ function Set-TargetResource } try { - New-MgGroupOwnerByRef -GroupId ($currentGroup.Id) -BodyParameter $ownerObject -ErrorAction Stop| Out-Null + New-MgGroupOwnerByRef -GroupId ($currentGroup.Id) -BodyParameter $ownerObject -ErrorAction Stop | Out-Null } catch { - if ($_.Exception.Message -notlike "*One or more added object references already exist for the following modified properties*") + if ($_.Exception.Message -notlike '*One or more added object references already exist for the following modified properties*') { throw $_ } @@ -945,6 +947,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" # Check Licenses @@ -1078,29 +1081,32 @@ function Export-TargetResource # Define the list of attributes $attributesToCheck = @( - "description", - "displayName", - "hasMembersWithLicenseErrors", - "mail", - "mailNickname", - "onPremisesSecurityIdentifier", - "onPremisesSyncEnabled", - "preferredLanguage" + 'description', + 'displayName', + 'hasMembersWithLicenseErrors', + 'mail', + 'mailNickname', + 'onPremisesSecurityIdentifier', + 'onPremisesSyncEnabled', + 'preferredLanguage' ) # Initialize a flag to indicate whether any attribute matches the condition $matchConditionFound = $false # Check each attribute in the list - foreach ($attribute in $attributesToCheck) { - if ($Filter -like "*$attribute eq null*") { + foreach ($attribute in $attributesToCheck) + { + if ($Filter -like "*$attribute eq null*") + { $matchConditionFound = $true break } } # If any attribute matches, add parameters to $ExportParameters - if ($matchConditionFound -or $Filter -like "*endsWith*") { + if ($matchConditionFound -or $Filter -like '*endsWith*') + { $ExportParameters.Add('CountVariable', 'count') $ExportParameters.Add('ConsistencyLevel', 'eventual') } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupLifecyclePolicy/MSFT_AADGroupLifecyclePolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupLifecyclePolicy/MSFT_AADGroupLifecyclePolicy.psm1 index d7fb7cbdeb..64fc27b4ad 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupLifecyclePolicy/MSFT_AADGroupLifecyclePolicy.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupLifecyclePolicy/MSFT_AADGroupLifecyclePolicy.psm1 @@ -324,6 +324,8 @@ function Test-TargetResource Write-Verbose -Message 'Testing configuration of AzureAD Groups Lifecycle Policy' $CurrentValues = Get-TargetResource @PSBoundParameters + + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsNamingPolicy/MSFT_AADGroupsNamingPolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsNamingPolicy/MSFT_AADGroupsNamingPolicy.psm1 index 3f3556c1a5..4e400a5690 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsNamingPolicy/MSFT_AADGroupsNamingPolicy.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsNamingPolicy/MSFT_AADGroupsNamingPolicy.psm1 @@ -284,6 +284,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsSettings/MSFT_AADGroupsSettings.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsSettings/MSFT_AADGroupsSettings.psm1 index aa1d47adf6..ba85c2ec10 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsSettings/MSFT_AADGroupsSettings.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADGroupsSettings/MSFT_AADGroupsSettings.psm1 @@ -415,6 +415,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADNamedLocationPolicy/MSFT_AADNamedLocationPolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADNamedLocationPolicy/MSFT_AADNamedLocationPolicy.psm1 index cb125080aa..d1f57d538e 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADNamedLocationPolicy/MSFT_AADNamedLocationPolicy.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADNamedLocationPolicy/MSFT_AADNamedLocationPolicy.psm1 @@ -398,6 +398,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleDefinition/MSFT_AADRoleDefinition.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleDefinition/MSFT_AADRoleDefinition.psm1 index 242ee1b0f2..4b07889575 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleDefinition/MSFT_AADRoleDefinition.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleDefinition/MSFT_AADRoleDefinition.psm1 @@ -365,6 +365,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleEligibilityScheduleRequest/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleEligibilityScheduleRequest/settings.json index e6d4aedab2..920f41deef 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleEligibilityScheduleRequest/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleEligibilityScheduleRequest/settings.json @@ -14,7 +14,7 @@ "application": { "read": [ { - "name": "RoleEligibilitySchedule.ReadWrite.Directory" + "name": "RoleEligibilitySchedule.Read.Directory" } ], "update": [ diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleSetting/MSFT_AADRoleSetting.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleSetting/MSFT_AADRoleSetting.psm1 index ab1bd0536e..a88e290821 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleSetting/MSFT_AADRoleSetting.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADRoleSetting/MSFT_AADRoleSetting.psm1 @@ -1316,6 +1316,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADSecurityDefaults/MSFT_AADSecurityDefaults.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADSecurityDefaults/MSFT_AADSecurityDefaults.psm1 index a1fea0964d..0094a10a24 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADSecurityDefaults/MSFT_AADSecurityDefaults.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADSecurityDefaults/MSFT_AADSecurityDefaults.psm1 @@ -253,6 +253,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADServicePrincipal/MSFT_AADServicePrincipal.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADServicePrincipal/MSFT_AADServicePrincipal.psm1 index 489a81b607..92235300ac 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADServicePrincipal/MSFT_AADServicePrincipal.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADServicePrincipal/MSFT_AADServicePrincipal.psm1 @@ -603,6 +603,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADTenantDetails/MSFT_AADTenantDetails.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADTenantDetails/MSFT_AADTenantDetails.psm1 index 7431729c3c..b6e99e6faa 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADTenantDetails/MSFT_AADTenantDetails.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADTenantDetails/MSFT_AADTenantDetails.psm1 @@ -283,7 +283,8 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters - Write-Verbose -Message "Target-Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" + Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters $ValuesToCheck.Remove('Credential') | Out-Null diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADTokenLifetimePolicy/MSFT_AADTokenLifetimePolicy.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_AADTokenLifetimePolicy/MSFT_AADTokenLifetimePolicy.psm1 index fdea455788..89d4771757 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_AADTokenLifetimePolicy/MSFT_AADTokenLifetimePolicy.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_AADTokenLifetimePolicy/MSFT_AADTokenLifetimePolicy.psm1 @@ -300,6 +300,7 @@ function Test-TargetResource $CurrentValues = Get-TargetResource @PSBoundParameters + Write-Verbose -Message "Current Values: $(Convert-M365DscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-M365DscHashtableToString -Hashtable $PSBoundParameters)" $ValuesToCheck = $PSBoundParameters diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_EXOActiveSyncDeviceAccessRule/MSFT_EXOActiveSyncDeviceAccessRule.schema.mof b/Modules/Microsoft365DSC/DSCResources/MSFT_EXOActiveSyncDeviceAccessRule/MSFT_EXOActiveSyncDeviceAccessRule.schema.mof index 7fec77b681..1da0ec571b 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_EXOActiveSyncDeviceAccessRule/MSFT_EXOActiveSyncDeviceAccessRule.schema.mof +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_EXOActiveSyncDeviceAccessRule/MSFT_EXOActiveSyncDeviceAccessRule.schema.mof @@ -2,7 +2,6 @@ class MSFT_EXOActiveSyncDeviceAccessRule : OMI_BaseResource { [Key, Description("The Identity parameter specifies the identity of the device access rule.")] String Identity; - [Write, Description("Unique Identifier. Read-Only")] String GUID; [Write, Description("The AccessLevel parameter specifies whether the devices are allowed, blocked or quarantined."), ValueMap{"Allow","Block","Quarantine"}, Values{"Allow","Block","Quarantine"}] String AccessLevel; [Write, Description("The Characteristic parameter specifies the device characteristic or category that's used by the rule."), ValueMap{"DeviceModel","DeviceType","DeviceOS","UserAgent","XMSWLHeader"}, Values{"DeviceModel","DeviceType","DeviceOS","UserAgent","XMSWLHeader"}] String Characteristic; [Write, Description("The QueryString parameter specifies the device identifier that's used by the rule. This parameter uses a text value that's used with Characteristic parameter value to define the device.")] String QueryString; diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.psm1 index d4e2473c17..20e1ef39bc 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.psm1 @@ -22,7 +22,7 @@ function Get-TargetResource [Parameter()] [ValidateSet('keyEncipherment','digitalSignature')] - [System.String] + [System.String[]] $KeyUsage, [Parameter()] @@ -255,7 +255,7 @@ function Get-TargetResource CertificateStore = $enumCertificateStore HashAlgorithm = $enumHashAlgorithm KeySize = $enumKeySize - KeyUsage = $enumKeyUsage + KeyUsage = $enumKeyUsage.Split(',') ScepServerUrls = $getValue.AdditionalProperties.scepServerUrls SubjectAlternativeNameFormatString = $getValue.AdditionalProperties.subjectAlternativeNameFormatString SubjectNameFormatString = $getValue.AdditionalProperties.subjectNameFormatString @@ -332,7 +332,7 @@ function Set-TargetResource [Parameter()] [ValidateSet('keyEncipherment','digitalSignature')] - [System.String] + [System.String[]] $KeyUsage, [Parameter()] @@ -460,6 +460,7 @@ function Set-TargetResource $CreateParameters = ([Hashtable]$BoundParameters).clone() $CreateParameters = Rename-M365DSCCimInstanceParameter -Properties $CreateParameters $CreateParameters.Remove('Id') | Out-Null + $CreateParameters['keyUsage'] = $CreateParameters['keyUsage'] -join ',' $keys = (([Hashtable]$CreateParameters).clone()).Keys foreach ($key in $keys) @@ -497,6 +498,7 @@ function Set-TargetResource $UpdateParameters = Rename-M365DSCCimInstanceParameter -Properties $UpdateParameters $UpdateParameters.Remove('Id') | Out-Null + $UpdateParameters['keyUsage'] = $UpdateParameters['keyUsage'] -join ',' $keys = (([Hashtable]$UpdateParameters).clone()).Keys foreach ($key in $keys) @@ -559,7 +561,7 @@ function Test-TargetResource [Parameter()] [ValidateSet('keyEncipherment','digitalSignature')] - [System.String] + [System.String[]] $KeyUsage, [Parameter()] diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.schema.mof b/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.schema.mof index a97c29ff40..b206990518 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.schema.mof +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10.schema.mof @@ -27,7 +27,7 @@ class MSFT_IntuneDeviceConfigurationScepCertificatePolicyWindows10 : OMI_BaseRes [Write, Description("Target store certificate. Possible values are: user, machine."), ValueMap{"user","machine"}, Values{"user","machine"}] String CertificateStore; [Write, Description("SCEP Hash Algorithm. Possible values are: sha1, sha2."), ValueMap{"sha1","sha2"}, Values{"sha1","sha2"}] String HashAlgorithm; [Write, Description("SCEP Key Size. Possible values are: size1024, size2048, size4096."), ValueMap{"size1024","size2048","size4096"}, Values{"size1024","size2048","size4096"}] String KeySize; - [Write, Description("SCEP Key Usage. Possible values are: keyEncipherment, digitalSignature."), ValueMap{"keyEncipherment","digitalSignature"}, Values{"keyEncipherment","digitalSignature"}] String KeyUsage; + [Write, Description("SCEP Key Usage. Possible values are: keyEncipherment, digitalSignature."), ValueMap{"keyEncipherment","digitalSignature"}, Values{"keyEncipherment","digitalSignature"}] String KeyUsage[]; [Write, Description("SCEP Server Url(s).")] String ScepServerUrls[]; [Write, Description("Custom String that defines the AAD Attribute.")] String SubjectAlternativeNameFormatString; [Write, Description("Custom format to use with SubjectNameFormat = Custom. Example: CN={{UserName}},E={{EmailAddress}},OU=Enterprise Users,O=Contoso Corporation,L=Redmond,ST=WA,C=US")] String SubjectNameFormatString; diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog.psm1 index 45cfe819b4..83641e6a2e 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog/MSFT_IntuneExploitProtectionPolicyWindows10SettingCatalog.psm1 @@ -320,8 +320,8 @@ function Set-TargetResource -TemplateReferenceId $templateReferenceId Update-IntuneDeviceConfigurationPolicy ` - -DeviceConfigurationPolicyId $Identity ` - -Name $DisplayName ` + -DeviceConfigurationPolicyId $currentPolicy.Identity ` + -Name $currentPolicy.DisplayName ` -Description $Description ` -TemplateReferenceId $templateReferenceId ` -Platforms $platforms ` @@ -334,14 +334,14 @@ function Set-TargetResource { $assignmentsHash += Get-M365DSCDRGComplexTypeToHashtable -ComplexObject $Assignment } - Update-DeviceConfigurationPolicyAssignment -DeviceConfigurationPolicyId $Identity ` + Update-DeviceConfigurationPolicyAssignment -DeviceConfigurationPolicyId $currentPolicy.Identity ` -Targets $assignmentsHash #endregion } elseif ($Ensure -eq 'Absent' -and $currentPolicy.Ensure -eq 'Present') { Write-Verbose -Message "Removing Endpoint Protection Policy {$($currentPolicy.DisplayName)}" - Remove-MgBetaDeviceManagementConfigurationPolicy -DeviceManagementConfigurationPolicyId $Identity + Remove-MgBetaDeviceManagementConfigurationPolicy -DeviceManagementConfigurationPolicyId $currentPolicy.Identity } } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.psm1 index 8a6deac065..c86fde3486 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.psm1 @@ -88,7 +88,12 @@ function Get-TargetResource [Parameter()] [Switch] - $ManagedIdentity + $ManagedIdentity, + + [Parameter()] + [ValidateSet('AllowFullAccess', 'AllowLimitedAccess', 'BlockAccess', 'ProtectionLevel')] + [System.String] + $ConditionalAccessPolicy ) Write-Verbose -Message 'Getting configuration of SharePoint Online Access Control Settings' @@ -137,6 +142,7 @@ function Get-TargetResource CertificateThumbprint = $CertificateThumbprint Managedidentity = $ManagedIdentity.IsPresent Ensure = 'Present' + ConditionalAccessPolicy = $SPOAccessControlSettings.ConditionalAccessPolicy } } catch @@ -245,7 +251,12 @@ function Set-TargetResource [Parameter()] [Switch] - $ManagedIdentity + $ManagedIdentity, + + [Parameter()] + [ValidateSet('AllowFullAccess', 'AllowLimitedAccess', 'BlockAccess', 'ProtectionLevel')] + [System.String] + $ConditionalAccessPolicy ) Write-Verbose -Message 'Setting configuration of SharePoint Online Access Control Settings' @@ -377,7 +388,12 @@ function Test-TargetResource [Parameter()] [Switch] - $ManagedIdentity + $ManagedIdentity, + + [Parameter()] + [ValidateSet('AllowFullAccess', 'AllowLimitedAccess', 'BlockAccess', 'ProtectionLevel')] + [System.String] + $ConditionalAccessPolicy ) #Ensure the proper dependencies are installed in the current environment. Confirm-M365DSCDependencies @@ -413,7 +429,8 @@ function Test-TargetResource 'DisallowInfectedFileDownload', ` 'ExternalServicesEnabled', ` 'EmailAttestationRequired', ` - 'EmailAttestationReAuthDays') + 'EmailAttestationReAuthDays', + 'ConditionalAccessPolicy') Write-Verbose -Message "Test-TargetResource returned $TestResult" diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.schema.mof b/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.schema.mof index 2d4ab4ac32..dcde0c4937 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.schema.mof +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_SPOAccessControlSettings/MSFT_SPOAccessControlSettings.schema.mof @@ -22,4 +22,5 @@ class MSFT_SPOAccessControlSettings : OMI_BaseResource [Write, Description("Path to certificate used in service principal usually a PFX file.")] String CertificatePath; [Write, Description("Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication.")] String CertificateThumbprint; [Write, Description("Managed ID being used for authentication.")] Boolean ManagedIdentity; + [Write, Description("Blocks or limits access to SharePoint and OneDrive content from un-managed devices."), ValueMap{"AllowFullAccess","AllowLimitedAccess","BlockAccess","ProtectionLevel"}, Values{"AllowFullAccess","AllowLimitedAccess","BlockAccess","ProtectionLevel"}] string ConditionalAccessPolicy; }; diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppPermissionPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppPermissionPolicy/settings.json index 577d81ca16..eccfc5b5b6 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppPermissionPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppPermissionPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppSetupPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppSetupPolicy/settings.json index f358c5184a..cf65623433 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppSetupPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAppSetupPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAudioConferencingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAudioConferencingPolicy/settings.json index 02459e9dbb..315e33218f 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAudioConferencingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsAudioConferencingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallHoldPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallHoldPolicy/settings.json index c0ba8680fe..0a02727b6d 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallHoldPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallHoldPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallParkPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallParkPolicy/settings.json index 6740f367ef..46844aa6e1 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallParkPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallParkPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/MSFT_TeamsCallQueue.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/MSFT_TeamsCallQueue.psm1 index bedf6c253f..45cb5d2119 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/MSFT_TeamsCallQueue.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/MSFT_TeamsCallQueue.psm1 @@ -249,8 +249,18 @@ function Get-TargetResource $nullReturn.Ensure = 'Absent' try { - $queue = Get-CsCallQueue -NameFilter $Name ` - -ErrorAction SilentlyContinue | Where-Object -FilterScript {$_.Name -eq $Name} + if (-not $Script:ExportMode) + { + Write-Host -Message "Getting Office 365 queue $Name" + $queue = Get-CsCallQueue -NameFilter $Name ` + -ErrorAction SilentlyContinue | Where-Object -FilterScript {$_.Name -eq $Name} + } + else + { + Write-Host -Message "Retrieving queue $Name from the exported instances" + $queue = $Script:exportedInstances | Where-Object -FilterScript {$_.Name -eq $Name} + } + if ($null -eq $queue) { diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/settings.json index 64fe70d0ef..00003096ca 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallQueue/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallingPolicy/settings.json index 0b8110a144..8879faeb06 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCallingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsChannelsPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsChannelsPolicy/settings.json index e03f33559c..156a518f63 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsChannelsPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsChannelsPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsClientConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsClientConfiguration/settings.json index 80fc97c6bb..b841c9e6c6 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsClientConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsClientConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsComplianceRecordingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsComplianceRecordingPolicy/settings.json index 93d00a00ad..24bbf15a2f 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsComplianceRecordingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsComplianceRecordingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCortanaPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCortanaPolicy/settings.json index 5751ac389c..1e54208f4c 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCortanaPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsCortanaPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsDialInConferencingTenantSettings/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsDialInConferencingTenantSettings/settings.json index f69501007c..215b531525 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsDialInConferencingTenantSettings/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsDialInConferencingTenantSettings/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEmergencyCallingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEmergencyCallingPolicy/settings.json index db23adfa8b..a55c81a8a4 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEmergencyCallingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEmergencyCallingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEnhancedEncryptionPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEnhancedEncryptionPolicy/settings.json index ed291895d7..daa1172c7f 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEnhancedEncryptionPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEnhancedEncryptionPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEventsPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEventsPolicy/settings.json index b8a36afd9d..052f6182a9 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEventsPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsEventsPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFederationConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFederationConfiguration/settings.json index d8dc2dfae9..d0337ae301 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFederationConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFederationConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFeedbackPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFeedbackPolicy/settings.json index 6668c9de46..4c276464d8 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFeedbackPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFeedbackPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFilesPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFilesPolicy/settings.json index 8eb20a3b38..738a57bc27 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFilesPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsFilesPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGroupPolicyAssignment/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGroupPolicyAssignment/settings.json index 71d9d50fb6..2da9dc49bf 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGroupPolicyAssignment/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGroupPolicyAssignment/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestCallingConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestCallingConfiguration/settings.json index 902494401a..a326647bf5 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestCallingConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestCallingConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.psm1 index 60f8ca4e9b..af8fff6740 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.psm1 @@ -27,6 +27,10 @@ function Get-TargetResource [System.Boolean] $AllowMeetNow, + [Parameter()] + [System.Boolean] + $AllowTranscription, + [Parameter()] [System.Management.Automation.PSCredential] $Credential, @@ -79,6 +83,7 @@ function Get-TargetResource LiveCaptionsEnabledType = $config.LiveCaptionsEnabledType ScreenSharingMode = $config.ScreenSharingMode AllowMeetNow = $config.AllowMeetNow + AllowTranscription = $config.AllowTranscription Credential = $Credential ApplicationId = $ApplicationId TenantId = $TenantId @@ -127,6 +132,10 @@ function Set-TargetResource [System.Boolean] $AllowMeetNow, + [Parameter()] + [System.Boolean] + $AllowTranscription, + [Parameter()] [System.Management.Automation.PSCredential] $Credential, @@ -204,6 +213,10 @@ function Test-TargetResource [System.Boolean] $AllowMeetNow, + [Parameter()] + [System.Boolean] + $AllowTranscription, + [Parameter()] [System.Management.Automation.PSCredential] $Credential, diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.schema.mof b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.schema.mof index 98510798c3..d5781e1917 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.schema.mof +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/MSFT_TeamsGuestMeetingConfiguration.schema.mof @@ -6,6 +6,7 @@ class MSFT_TeamsGuestMeetingConfiguration : OMI_BaseResource [Write, Description("Determines whether real-time captions are available for guests in Teams meetings."), ValueMap{"Disabled","DisabledUserOverride"}, Values{"Disabled","DisabledUserOverride"}] string LiveCaptionsEnabledType; [Write, Description("Determines the mode in which guests can share a screen in calls or meetings. Set this to SingleApplication to allow the user to share an application at a given point in time. Set this to EntireScreen to allow the user to share anything on their screens. Set this to Disabled to prohibit the user from sharing their screens."), ValueMap{"Disabled","EntireScreen","SingleApplication"}, Values{"Disabled","EntireScreen","SingleApplication"}] string ScreenSharingMode; [Write, Description("Determines whether guests can start ad-hoc meetings. Set this to TRUE to allow guests to start ad-hoc meetings. Set this to FALSE to prohibit guests from starting ad-hoc meetings.")] boolean AllowMeetNow; + [Write, Description("Determines whether guests can enable post-meeting captions and transcriptions in meetings. Set this to TRUE to allow. Set this to FALSE to prohibit.")] boolean AllowTranscription; [Write, Description("Credentials of the Teams Admin"), EmbeddedInstance("MSFT_Credential")] string Credential; [Write, Description("Id of the Azure Active Directory application to authenticate with.")] String ApplicationId; [Write, Description("Name of the Azure Active Directory tenant used for authentication. Format contoso.onmicrosoft.com")] String TenantId; diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/settings.json index a93b6b9a53..74a075d298 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMeetingConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMessagingConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMessagingConfiguration/settings.json index daf2772dc1..e0fb501874 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMessagingConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsGuestMessagingConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsIPPhonePolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsIPPhonePolicy/settings.json index 60e07fed7c..f6ae4193eb 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsIPPhonePolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsIPPhonePolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastConfiguration/settings.json index ffabcd4e7d..b34b17d280 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastPolicy/settings.json index 432676cf64..2900ffb062 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingBroadcastPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingConfiguration/settings.json index 984857cb67..21c86a0dce 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingPolicy/settings.json index 32c8428a98..6ddc930616 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMeetingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMessagingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMessagingPolicy/settings.json index 5db17c3de8..cada36dde0 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMessagingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMessagingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMobilityPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMobilityPolicy/settings.json index 36a2ba660c..fdc0920ac6 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMobilityPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsMobilityPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsNetworkRoamingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsNetworkRoamingPolicy/settings.json index b9f4fee0ec..0bf17bd572 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsNetworkRoamingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsNetworkRoamingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoiceUser/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoiceUser/settings.json index 7faa945073..3548e00137 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoiceUser/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoiceUser/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailPolicy/settings.json index ce987abcaf..a76fc4a517 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailUserSettings/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailUserSettings/settings.json index ef7c36a88d..954e881fa2 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailUserSettings/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOnlineVoicemailUserSettings/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOrgWideAppSettings/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOrgWideAppSettings/settings.json index c98543bb2b..8f51aaedff 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOrgWideAppSettings/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsOrgWideAppSettings/settings.json @@ -16,8 +16,16 @@ "update": [] }, "application": { - "read": [], - "update": [] + "read": [ + { + "name": "Organization.Read.All" + } + ], + "update": [ + { + "name": "Organization.Read.All" + } + ] } } } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsPstnUsage/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsPstnUsage/settings.json index 7f3188173e..a95c14abe1 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsPstnUsage/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsPstnUsage/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsShiftsPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsShiftsPolicy/settings.json index e123113879..66fb222829 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsShiftsPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsShiftsPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/MSFT_TeamsTeam.psm1 b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/MSFT_TeamsTeam.psm1 index f100145246..836e0d6174 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/MSFT_TeamsTeam.psm1 +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/MSFT_TeamsTeam.psm1 @@ -178,7 +178,9 @@ function Get-TargetResource Write-Verbose -Message "Getting Team {$DisplayName} Owners" [array]$Owners = Get-TeamUser -GroupId $team.GroupId | Where-Object { $_.Role -eq 'owner' } - if ($null -eq $Owners) { # Without Users, Get-TeamUser return null instead on empty array + if ($null -eq $Owners) + { + # Without Users, Get-TeamUser return null instead on empty array $Owners = @() } @@ -426,22 +428,23 @@ function Set-TargetResource { $ConnectionMode = New-M365DSCConnection -Workload 'MicrosoftGraph' ` -InboundParameters $PSBoundParameters - $group = New-MgGroup -DisplayName $DisplayName -GroupTypes 'Unified' -MailEnabled $true -SecurityEnabled $true -MailNickname $MailNickName + $group = New-MgGroup -DisplayName $DisplayName -GroupTypes 'Unified' -MailEnabled -SecurityEnabled -MailNickname $MailNickName -ErrorAction Stop $currentOwner = (($CurrentParameters.Owner)[0]) Write-Verbose -Message "Retrieving Group Owner {$currentOwner}" - $ownerUser = Get-MgUser -Search $currentOwner + $ownerUser = Get-MgUser -Search $currentOwner -ConsistencyLevel eventual + $ownerOdataID = "https://graph.microsoft.com/v1.0/directoryObjects/$($ownerUser.Id)" - Write-Verbose -Message "Adding Owner {$($ownerUser.ObjectId)} to Group {$($group.Id)}" + Write-Verbose -Message "Adding Owner {$($ownerUser.Id)} to Group {$($group.Id)}" try { - New-MgGroupOwnerByRef -GroupId $group.Id -RefObjectId $ownerUser.ObjectId -ErrorAction Stop + New-MgGroupOwnerByRef -GroupId $group.Id -OdataId $ownerOdataID -ErrorAction Stop } catch { Write-Verbose -Message 'Adding Owner - Sleeping for 15 seconds' Start-Sleep -Seconds 15 - New-MgGroupOwnerByRef -GroupId $group.Id -RefObjectId $ownerUser.ObjectId + New-MgGroupOwnerByRef -GroupId $group.Id -OdataId $ownerOdataID -ErrorAction Stop } try @@ -452,7 +455,7 @@ function Set-TargetResource { Write-Verbose -Message 'Creating Team - Sleeping for 15 seconds' Start-Sleep -Seconds 15 - New-Team -GroupId $group.Id + New-Team -GroupId $group.Id -ErrorAction Stop } } else diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/settings.json index 00f8da9c9c..b0a859acdd 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTeam/settings.json @@ -9,23 +9,59 @@ "graph": { "delegated": { "read": [], - "update": [ + "update": [] + }, + "application": { + "read": [ { - "name": "Group.ReadWrite.All" + "name": "Organization.Read.All" }, { "name": "User.Read.All" + }, + { + "name": "Group.ReadWrite.All" + }, + { + "name": "AppCatalog.ReadWrite.All" + }, + { + "name": "TeamSettings.ReadWrite.All" + }, + { + "name": "Channel.Delete.All" + }, + { + "name": "ChannelSettings.ReadWrite.All" + }, + { + "name": "ChannelMember.ReadWrite.All" } - ] - }, - "application": { - "read": [], + ], "update": [ { - "name": "Group.ReadWrite.All" + "name": "Organization.Read.All" }, { "name": "User.Read.All" + }, + { + "name": "Group.ReadWrite.All" + }, + { + "name": "AppCatalog.ReadWrite.All" + }, + { + "name": "TeamSettings.ReadWrite.All" + }, + { + "name": "Channel.Delete.All" + }, + { + "name": "ChannelSettings.ReadWrite.All" + }, + { + "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTemplatesPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTemplatesPolicy/settings.json index 930b841931..65cd70b275 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTemplatesPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTemplatesPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantDialPlan/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantDialPlan/settings.json index 97e8cd9738..7cd9f6f960 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantDialPlan/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantDialPlan/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkRegion/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkRegion/settings.json index a15ecdb7ee..73ceee74ee 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkRegion/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkRegion/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSite/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSite/settings.json index 5744117c04..9964a6c676 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSite/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSite/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSubnet/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSubnet/settings.json index 91cd91a901..6e5f9a2ed3 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSubnet/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantNetworkSubnet/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantTrustedIPAddress/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantTrustedIPAddress/settings.json index 3e5b195cdd..1ff8eda6ba 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantTrustedIPAddress/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTenantTrustedIPAddress/settings.json @@ -9,5 +9,24 @@ "Teams Administrator" ] }, - "permissions": [] + "permissions": { + "graph": { + "delegated": { + "read": [], + "update": [] + }, + "application": { + "read": [ + { + "name": "Organization.Read.All" + } + ], + "update": [ + { + "name": "Organization.Read.All" + } + ] + } + } + } } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTranslationRule/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTranslationRule/settings.json index 9f39a6b7d4..81b9cc1e06 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTranslationRule/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsTranslationRule/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUnassignedNumberTreatment/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUnassignedNumberTreatment/settings.json index dd94199bdc..8dd2e125fe 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUnassignedNumberTreatment/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUnassignedNumberTreatment/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpdateManagementPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpdateManagementPolicy/settings.json index a2492103b3..1d93d16c77 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpdateManagementPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpdateManagementPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradeConfiguration/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradeConfiguration/settings.json index 5e06cb2af3..8f51aaedff 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradeConfiguration/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradeConfiguration/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradePolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradePolicy/settings.json index 3183036251..168d5f2898 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradePolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUpgradePolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserCallingSettings/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserCallingSettings/settings.json index 5f96938eab..316f1aabb6 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserCallingSettings/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserCallingSettings/settings.json @@ -16,8 +16,16 @@ "update": [] }, "application": { - "read": [], - "update": [] + "read": [ + { + "name": "Organization.Read.All" + } + ], + "update": [ + { + "name": "Organization.Read.All" + } + ] } } } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserPolicyAssignment/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserPolicyAssignment/settings.json index 8dc4e8a2fa..a401206d90 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserPolicyAssignment/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsUserPolicyAssignment/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVdiPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVdiPolicy/settings.json index 8b7863510a..adff164f18 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVdiPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVdiPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoute/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoute/settings.json index 234e57b78a..741fe4ab9f 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoute/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoute/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoutingPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoutingPolicy/settings.json index 3e98c36a43..63ce1df103 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoutingPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsVoiceRoutingPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsWorkloadPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsWorkloadPolicy/settings.json index 2fdbdb1053..1e851bdd4e 100644 --- a/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsWorkloadPolicy/settings.json +++ b/Modules/Microsoft365DSC/DSCResources/MSFT_TeamsWorkloadPolicy/settings.json @@ -19,53 +19,11 @@ "read": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ], "update": [ { "name": "Organization.Read.All" - }, - { - "name": "User.Read.All" - }, - { - "name": "Group.ReadWrite.All" - }, - { - "name": "AppCatalog.ReadWrite.All" - }, - { - "name": "TeamSettings.ReadWrite.All" - }, - { - "name": "Channel.Delete.All" - }, - { - "name": "ChannelSettings.ReadWrite.All" - }, - { - "name": "ChannelMember.ReadWrite.All" } ] } diff --git a/Modules/Microsoft365DSC/Examples/Resources/EXOOfflineAddressBook/2-Update.ps1 b/Modules/Microsoft365DSC/Examples/Resources/EXOOfflineAddressBook/2-Update.ps1 index 0fe9391578..9957b25583 100644 --- a/Modules/Microsoft365DSC/Examples/Resources/EXOOfflineAddressBook/2-Update.ps1 +++ b/Modules/Microsoft365DSC/Examples/Resources/EXOOfflineAddressBook/2-Update.ps1 @@ -20,8 +20,8 @@ Configuration Example { Name = "Integration Address Book" AddressLists = @('\All Users') - DiffRetentionPeriod = "30" - IsDefault = $false # Updated Property + DiffRetentionPeriod = "60" # Updated Property + IsDefault = $true Ensure = "Present" Credential = $Credscredential } diff --git a/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/1-Create.ps1 b/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/1-Create.ps1 index ad945407c9..ea3febcd48 100644 --- a/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/1-Create.ps1 +++ b/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/1-Create.ps1 @@ -43,7 +43,7 @@ Configuration Example HashAlgorithm = "sha2"; KeySize = "size2048"; KeyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp"; - KeyUsage = "digitalSignature"; + KeyUsage = @("digitalSignature"); RenewalThresholdPercentage = 25; ScepServerUrls = @("https://mydomain.com/certsrv/mscep/mscep.dll"); SubjectAlternativeNameType = "none"; diff --git a/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/2-Update.ps1 b/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/2-Update.ps1 index ee0f026049..93e40032e6 100644 --- a/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/2-Update.ps1 +++ b/Modules/Microsoft365DSC/Examples/Resources/IntuneDeviceConfigurationSCEPCertificatePolicyWindows10/2-Update.ps1 @@ -43,7 +43,7 @@ Configuration Example HashAlgorithm = "sha2"; KeySize = "size2048"; KeyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp"; - KeyUsage = "digitalSignature"; + KeyUsage = @("digitalSignature"); RenewalThresholdPercentage = 30; # Updated Property ScepServerUrls = @("https://mydomain.com/certsrv/mscep/mscep.dll"); SubjectAlternativeNameType = "none"; diff --git a/Modules/Microsoft365DSC/Examples/Resources/TeamsGuestMeetingConfiguration/1-ConfigureTeamsGuestMeeting.ps1 b/Modules/Microsoft365DSC/Examples/Resources/TeamsGuestMeetingConfiguration/1-ConfigureTeamsGuestMeeting.ps1 index 3924d19555..e3e1994f44 100644 --- a/Modules/Microsoft365DSC/Examples/Resources/TeamsGuestMeetingConfiguration/1-ConfigureTeamsGuestMeeting.ps1 +++ b/Modules/Microsoft365DSC/Examples/Resources/TeamsGuestMeetingConfiguration/1-ConfigureTeamsGuestMeeting.ps1 @@ -16,11 +16,13 @@ Configuration Example { TeamsGuestMeetingConfiguration 'TeamsGuestMeetingConfiguration' { - Identity = "Global" - AllowIPVideo = $True - AllowMeetNow = $True - ScreenSharingMode = "EntireScreen" - Credential = $Credscredential + Identity = 'Global' + AllowIPVideo = $true + LiveCaptionsEnabledType = 'Disabled' + ScreenSharingMode = 'EntireScreen' + AllowMeetNow = $true + AllowTranscription = $true + Credential = $Credscredential } } } diff --git a/Modules/Microsoft365DSC/Microsoft365DSC.psd1 b/Modules/Microsoft365DSC/Microsoft365DSC.psd1 index 78deeb1f7e..1c4aa91e5d 100644 --- a/Modules/Microsoft365DSC/Microsoft365DSC.psd1 +++ b/Modules/Microsoft365DSC/Microsoft365DSC.psd1 @@ -3,7 +3,7 @@ # # Generated by: Microsoft Corporation # -# Generated on: 2024-02-21 +# Generated on: 2024-02-28 @{ @@ -11,7 +11,7 @@ # RootModule = '' # Version number of this module. - ModuleVersion = '1.24.221.1' + ModuleVersion = '1.24.228.1' # Supported PSEditions # CompatiblePSEditions = @() @@ -141,37 +141,66 @@ # ReleaseNotes of this module ReleaseNotes = '* AADApplication - * Expose the description field in the resource. + * Show current values of resource in Test-TargetResource + * AADAuthorizationPolicy + * Show current values of resource in Test-TargetResource * AADConditionalAccessPolicy - * Fixing issue where Membership kinds no longer accepted empty values. - ROLLING BACK [#4344](https://github.com/microsoft/Microsoft365DSC/issues/4344) - FIXES [#4347](https://github.com/microsoft/Microsoft365DSC/issues/4347) - * Throws an error if role, user or group was not found in the Set method. - FIXES [#4342](https://github.com/microsoft/Microsoft365DSC/issues/4342) - * EXOAuthenticationPolicyAssignment - * Improved performance by using a filter to retrieve assignments. - * Export now retrieves the user principal name instead of the user id. - * EXOAvailabilityConfig - * Export now retrieves the user principal name instead of the user id. - * EXOCASMailboxPlan - * Added the DisplayName property. - * EXODataClassification - * Added logic to retrieve by name in the GET method if no match found by id. - * EXOMailboxAutoReplyConfiguration - * Added the owner property. - * EXOMailboxPlan - * Added the DisplayName property. - * EXOMailboxSettings - * Export now retrieves instances by User Principal Name instead of GUID. - * EXOPlace - * Added the DisplayName property. - * EXORecipientPermission - * Export now retrieves instances by User Principal Name instead of GUID. - * EXOSharedMailbox - * Added the Identity parameter. + * Improved verbose logging to show that items are being skipped. + * Show current values of resource in Test-TargetResource + * AADExternalIdentityPolicy + * Show current values of resource in Test-TargetResource + * AADGroup + * Fixed issue with single quotes in the display name. + FIXES [#4358](https://github.com/microsoft/Microsoft365DSC/issues/4358) + * Show current values of resource in Test-TargetResource + * AADGroupLifecyclePolicy + * Show current values of resource in Test-TargetResource + * AADGroupsNamingPolicy + * Show current values of resource in Test-TargetResource + * AADGroupsSettings + * Show current values of resource in Test-TargetResource + * AADNamedLocationPolicy + * Show current values of resource in Test-TargetResource + * AADRoleDefinition + * Show current values of resource in Test-TargetResource + * AADRoleSetting + * Show current values of resource in Test-TargetResource + * AADSecurityDefaults + * Show current values of resource in Test-TargetResource + * AADServicePrincipal + * Show current values of resource in Test-TargetResource + * AADTenantDetails + * Show current values of resource in Test-TargetResource + * AADTokenLifetimePolicy + * Show current values of resource in Test-TargetResource + * EXOActiveSyncDeviceAccessRule + * Remove extra property GUID that is stopping EXO integration tests from + running + * IntuneDeviceConfigurationScepCertificatePolicyWindows10 + * Fixes an issue where the keyUsage property format was not correctly handled + * IntuneExploitProtectionPolicyWindows10SettingCatalog + * Fix update and removal of resource when Identity is from another tenant + FIXES [#3962](https://github.com/microsoft/Microsoft365DSC/issues/3962) + * SPOAccessControlSettings + * Added support for the ConditionalAccessPolicy parameter based on the PNP Module + * Teams resources + * Updated required application permissions to support [Application Based Authentication](https://learn.microsoft.com/en-us/microsoftteams/teams-powershell-application-authentication) + * TeamsCallQueue + * Reduce the number of Calls for Export using new cache pattern + FIXES [[#4191](https://github.com/microsoft/Microsoft365DSC/issues/4192)] + * TeamsGuestMeetingConfiguration + * Added the missing parameter AllowTranscription. + FIXES [#4363](https://github.com/microsoft/Microsoft365DSC/issues/4363) + * TeamsTeam + * Corrected Parameters for Graph Commands when creating a new Team + FIXES [#4383](https://github.com/microsoft/Microsoft365DSC/issues/4383) * MISC - * Uninstall-M365DSCOutdatedDependencies - * Outdated Microsoft365DSC-modules are now removed in their entirety.' + * M365DSCDRGUtil + Add new parameter for customizable assignment identifier + * M365DSCUtil + Change heuristics on how to find the mandatory key of the resources to + include them as part of the ResourceInstanceName during their export + FIXES [#4333](https://github.com/microsoft/Microsoft365DSC/issues/4333)' # Flag to indicate whether the module requires explicit user acceptance for install/update # RequireLicenseAcceptance = $false diff --git a/Modules/Microsoft365DSC/Modules/M365DSCDRGUtil.psm1 b/Modules/Microsoft365DSC/Modules/M365DSCDRGUtil.psm1 index afcfc6264b..84a923e68d 100644 --- a/Modules/Microsoft365DSC/Modules/M365DSCDRGUtil.psm1 +++ b/Modules/Microsoft365DSC/Modules/M365DSCDRGUtil.psm1 @@ -1298,7 +1298,11 @@ function Update-DeviceConfigurationPolicyAssignment [Parameter()] [ValidateSet('v1.0','beta')] [System.String] - $APIVersion = 'beta' + $APIVersion = 'beta', + + [Parameter()] + [System.String] + $RootIdentifier = 'assignments' ) try @@ -1331,8 +1335,10 @@ function Update-DeviceConfigurationPolicyAssignment } $deviceManagementPolicyAssignments += @{'target' = $formattedTarget} } - $body = @{'assignments' = $deviceManagementPolicyAssignments} | ConvertTo-Json -Depth 20 - write-verbose -Message $body + + $body = @{$RootIdentifier = $deviceManagementPolicyAssignments} | ConvertTo-Json -Depth 20 + Write-Verbose -Message $body + Invoke-MgGraphRequest -Method POST -Uri $Uri -Body $body -ErrorAction Stop } catch diff --git a/Modules/Microsoft365DSC/Modules/M365DSCUtil.psm1 b/Modules/Microsoft365DSC/Modules/M365DSCUtil.psm1 index 1dca1435e2..9fa3c31b6d 100644 --- a/Modules/Microsoft365DSC/Modules/M365DSCUtil.psm1 +++ b/Modules/Microsoft365DSC/Modules/M365DSCUtil.psm1 @@ -3361,38 +3361,47 @@ function Get-M365DSCExportContentForResource $Results = Format-M365DSCString -Properties $Results ` -ResourceName $ResourceName + if ($Script:AllM365DscResources.Count -eq 0) + { + $Script:AllM365DscResources = Get-DscResource -Module 'Microsoft365Dsc' + } + $primaryKey = '' - if ($Results.ContainsKey('IsSingleInstance')) + $Resource = $Script:AllM365DscResources.Where({ $_.Name -eq $ResourceName }) + $Keys = $Resource.Properties.Where({ $_.IsMandatory }) | ` + Select-Object -ExpandProperty Name + if ($Keys.Contains('IsSingleInstance')) { $primaryKey = '' } - elseif ($Results.ContainsKey('DisplayName')) + elseif ($Keys.Contains('DisplayName')) { $primaryKey = $Results.DisplayName } - elseif ($Results.ContainsKey('Identity')) - { - $primaryKey = $Results.Identity - } - elseif ($Results.ContainsKey('Id')) - { - $primaryKey = $Results.Id - } - elseif ($Results.ContainsKey('Name')) + elseif ($Keys.Contains('Name')) { $primaryKey = $Results.Name } - elseif ($Results.ContainsKey('Title')) + elseif ($Keys.Contains('Title')) { $primaryKey = $Results.Title } - elseif ($Results.ContainsKey('CdnType')) + elseif ($Keys.Contains('Identity')) + { + $primaryKey = $Results.Identity + } + elseif ($Keys.Contains('Id')) { - $primaryKey = $Results.CdnType + $primaryKey = $Results.Id } - elseif ($Results.ContainsKey('Usage')) + + if ([String]::IsNullOrEmpty($primaryKey) -and ` + -not $Keys.Contains('IsSingleInstance')) { - $primaryKey = $Results.Usage + foreach ($Key in $Keys) + { + $primaryKey += $Results.$Key + } } $instanceName = $ResourceName diff --git a/Tests/Integration/Microsoft365DSC/M365DSCIntegration.EXO.Update.Tests.ps1 b/Tests/Integration/Microsoft365DSC/M365DSCIntegration.EXO.Update.Tests.ps1 index fc2fbae073..8b35477834 100644 --- a/Tests/Integration/Microsoft365DSC/M365DSCIntegration.EXO.Update.Tests.ps1 +++ b/Tests/Integration/Microsoft365DSC/M365DSCIntegration.EXO.Update.Tests.ps1 @@ -675,8 +675,8 @@ { Name = "Integration Address Book" AddressLists = @('\All Users') - DiffRetentionPeriod = "30" - IsDefault = $false # Updated Property + DiffRetentionPeriod = "60" # Updated Property + IsDefault = $true Ensure = "Present" Credential = $Credscredential } diff --git a/Tests/Integration/Microsoft365DSC/M365DSCIntegration.INTUNE.Create.Tests.ps1 b/Tests/Integration/Microsoft365DSC/M365DSCIntegration.INTUNE.Create.Tests.ps1 index a9463d7e84..d524887a3e 100644 --- a/Tests/Integration/Microsoft365DSC/M365DSCIntegration.INTUNE.Create.Tests.ps1 +++ b/Tests/Integration/Microsoft365DSC/M365DSCIntegration.INTUNE.Create.Tests.ps1 @@ -1697,7 +1697,7 @@ HashAlgorithm = "sha2"; KeySize = "size2048"; KeyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp"; - KeyUsage = "digitalSignature"; + KeyUsage = @("digitalSignature"); RenewalThresholdPercentage = 25; ScepServerUrls = @("https://mydomain.com/certsrv/mscep/mscep.dll"); SubjectAlternativeNameType = "none"; diff --git a/Tests/QA/Microsoft365DSC.SettingsJson.Tests.ps1 b/Tests/QA/Microsoft365DSC.SettingsJson.Tests.ps1 index d4f856f750..0802afe87a 100644 --- a/Tests/QA/Microsoft365DSC.SettingsJson.Tests.ps1 +++ b/Tests/QA/Microsoft365DSC.SettingsJson.Tests.ps1 @@ -15,7 +15,7 @@ Describe -Name 'Successfully import Settings.json files' { } } -Describe -Name 'Successfully validate all used permissions in Settings.json files' { +Describe -Name 'Successfully validate all used permissions in Settings.json files ' { BeforeAll { $data = Invoke-WebRequest -Uri 'https://graphpermissions.azurewebsites.net/api/GetPermissionList' $roles = $data.Content.Split('|')[0].Split(',') @@ -25,7 +25,7 @@ Describe -Name 'Successfully validate all used permissions in Settings.json file $delegated = $data.Content.Split('|')[1].Split(',') } - It "Permissions used in settings.json file for '' should exist" -TestCases $settingsFiles { + It "Permissions used in settings.json file for '' should exist" -TestCases $settingsFiles { $json = Get-Content -Path $FullName -Raw $settings = ConvertFrom-Json -InputObject $json foreach ($permission in $settings.permissions.graph.application.read) @@ -33,10 +33,57 @@ Describe -Name 'Successfully validate all used permissions in Settings.json file # Only validate non-GUID (hidden) permissions. $ObjectGuid = [System.Guid]::empty # There is an issue where the GUI shows Tasks.Read.All but the OAuth value is actually Tasks.Read - if (-not [System.Guid]::TryParse($permission.Name ,[System.Management.Automation.PSReference]$ObjectGuid) -and + if (-not [System.Guid]::TryParse($permission.Name , [System.Management.Automation.PSReference]$ObjectGuid) -and $permission.Name -ne 'Tasks.Read.All') { - $permission.Name | Should -BeIn $roles + $permission.Name | Should -BeIn $roles -ErrorAction Continue + } + } + foreach ($permission in $settings.permissions.graph.application.write) + { + # Only validate non-GUID (hidden) permissions. + $ObjectGuid = [System.Guid]::empty + if (-not [System.Guid]::TryParse($permission.Name , [System.Management.Automation.PSReference]$ObjectGuid)) + { + $permission.Name | Should -BeIn $roles -ErrorAction Continue + } + } + } + + It "Should use the least permissions for ''" -TestCase $settingsFiles { + $json = Get-Content -Path $FullName -Raw + $settings = ConvertFrom-Json -InputObject $json + + $allowedPermissions = @() + + if ($settings.ResourceName -like 'Teams*') + { + $allowedPermissions = @( + 'Organization.Read.All', + 'User.Read.All', + 'Group.ReadWrite.All', + 'AppCatalog.ReadWrite.All', + 'TeamSettings.ReadWrite.All', + 'Channel.Delete.All', + 'ChannelSettings.ReadWrite.All', + 'ChannelMember.ReadWrite.All' + ) + } + if ($settings.ResourceName -like 'AADAuthenticationMethod*' -or $settings.ResourceName -eq 'AADAuthenticationStrengthPolicy') + { + $allowedPermissions = @( + 'Policy.ReadWrite.AuthenticationMethod' + ) + } + + foreach ($permission in $settings.permissions.graph.application.read) + { + $ObjectGuid = [System.Guid]::empty + # There is an issue where the GUI shows Tasks.Read.All but the OAuth value is actually Tasks.Read + if (-not [System.Guid]::TryParse($permission.Name , [System.Management.Automation.PSReference]$ObjectGuid) -and + $permission.Name -ne 'Tasks.Read.All' -and -not ($permission.Name -in $allowedPermissions)) + { + $permission.Name | Should -BeLike '*.Read.*' -ErrorAction Continue } } } diff --git a/Tests/TestHarness.psm1 b/Tests/TestHarness.psm1 index bcfbdc4cb9..4eb369f6e9 100644 --- a/Tests/TestHarness.psm1 +++ b/Tests/TestHarness.psm1 @@ -68,17 +68,17 @@ function Invoke-TestHarness $testsToRun += @( $commonTestFiles.FullName ) $filesToExecute = @() - if ($DscTestsPath -ne "") - { - $filesToExecute += $DscTestsPath - } - else - { - foreach ($testToRun in $testsToRun) - { - $filesToExecute += $testToRun - } - } + if ($DscTestsPath -ne '') + { + $filesToExecute += $DscTestsPath + } + else + { + foreach ($testToRun in $testsToRun) + { + $filesToExecute += $testToRun + } + } $Params = [ordered]@{ Path = $filesToExecute @@ -94,6 +94,9 @@ function Invoke-TestHarness Output = @{ Verbosity = 'Normal' } + Should = @{ + ErrorAction = 'Continue' + } } if ([String]::IsNullOrEmpty($TestResultsFile) -eq $false) @@ -169,6 +172,9 @@ function Invoke-QualityChecksHarness Output = @{ Verbosity = 'Detailed' } + Should = @{ + ErrorAction = 'Continue' + } } $results = Invoke-Pester -Configuration $Configuration diff --git a/Tests/Unit/Microsoft365DSC/Microsoft365DSC.IntuneDeviceConfigurationScepCertificatePolicyWindows10.Tests.ps1 b/Tests/Unit/Microsoft365DSC/Microsoft365DSC.IntuneDeviceConfigurationScepCertificatePolicyWindows10.Tests.ps1 index 0c7f8e3b5e..3ccde18392 100644 --- a/Tests/Unit/Microsoft365DSC/Microsoft365DSC.IntuneDeviceConfigurationScepCertificatePolicyWindows10.Tests.ps1 +++ b/Tests/Unit/Microsoft365DSC/Microsoft365DSC.IntuneDeviceConfigurationScepCertificatePolicyWindows10.Tests.ps1 @@ -86,7 +86,7 @@ Describe -Name $Global:DscHelper.DescribeHeader -Fixture { id = "FakeStringValue" KeySize = "size1024" keyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp" - KeyUsage = "keyEncipherment" + KeyUsage = @("keyEncipherment") renewalThresholdPercentage = 25 ScepServerUrls = @("FakeStringValue") SubjectAlternativeNameFormatString = "FakeStringValue" @@ -138,7 +138,7 @@ Describe -Name $Global:DscHelper.DescribeHeader -Fixture { id = "FakeStringValue" KeySize = "size1024" keyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp" - KeyUsage = "keyEncipherment" + KeyUsage = @("keyEncipherment") renewalThresholdPercentage = 25 ScepServerUrls = @("FakeStringValue") SubjectAlternativeNameFormatString = "FakeStringValue" @@ -225,7 +225,7 @@ Describe -Name $Global:DscHelper.DescribeHeader -Fixture { id = "FakeStringValue" KeySize = "size1024" keyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp" - KeyUsage = "keyEncipherment" + KeyUsage = @("keyEncipherment") renewalThresholdPercentage = 25 ScepServerUrls = @("FakeStringValue") SubjectAlternativeNameFormatString = "FakeStringValue" @@ -305,7 +305,7 @@ Describe -Name $Global:DscHelper.DescribeHeader -Fixture { id = "FakeStringValue" KeySize = "size1024" keyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp" - KeyUsage = "keyEncipherment" + KeyUsage = @("keyEncipherment") renewalThresholdPercentage = 25 ScepServerUrls = @("FakeStringValue") SubjectAlternativeNameFormatString = "FakeStringValue" diff --git a/Tests/Unit/Microsoft365DSC/Microsoft365DSC.TeamsGuestMeetingConfiguration.Tests.ps1 b/Tests/Unit/Microsoft365DSC/Microsoft365DSC.TeamsGuestMeetingConfiguration.Tests.ps1 index a57c69135a..947f7b3794 100644 --- a/Tests/Unit/Microsoft365DSC/Microsoft365DSC.TeamsGuestMeetingConfiguration.Tests.ps1 +++ b/Tests/Unit/Microsoft365DSC/Microsoft365DSC.TeamsGuestMeetingConfiguration.Tests.ps1 @@ -37,11 +37,13 @@ Describe -Name $Global:DscHelper.DescribeHeader -Fixture { Mock -CommandName Get-CsTeamsGuestMeetingConfiguration -MockWith { return @{ - Identity = 'Global' - AllowIPVideo = $true - ScreenSharingMode = 'Disabled' - AllowMeetNow = $false - Credential = $Credential + Identity = 'Global' + AllowIPVideo = $true + LiveCaptionsEnabledType = 'Disabled' + ScreenSharingMode = 'Disabled' + AllowMeetNow = $false + AllowTranscription = $false + Credential = $Credential } } @@ -57,16 +59,18 @@ Describe -Name $Global:DscHelper.DescribeHeader -Fixture { Context -Name 'When settings are correctly set' -Fixture { BeforeAll { $testParams = @{ - Identity = 'Global' - AllowIPVideo = $true - ScreenSharingMode = 'Disabled' - AllowMeetNow = $false - Credential = $Credential + Identity = 'Global' + AllowIPVideo = $true + LiveCaptionsEnabledType = 'Disabled' + ScreenSharingMode = 'Disabled' + AllowMeetNow = $false + AllowTranscription = $false + Credential = $Credential } } It 'Should return true for the AllowIPVideo property from the Get method' { - (Get-TargetResource @testParams).AllowIPVideo | Should -Be $True + (Get-TargetResource @testParams).AllowIPVideo | Should -Be $true } It 'Should return true from the Test method' { @@ -81,16 +85,17 @@ Describe -Name $Global:DscHelper.DescribeHeader -Fixture { Context -Name 'When settings are NOT correctly set' -Fixture { BeforeAll { $testParams = @{ - Identity = 'Global' - AllowIPVideo = $false # Drifted - ScreenSharingMode = 'Disabled' - AllowMeetNow = $false - Credential = $Credential + Identity = 'Global' + AllowIPVideo = $false # Drifted + LiveCaptionsEnabledType = 'Disabled' + ScreenSharingMode = 'Disabled' + AllowMeetNow = $false + Credential = $Credential } } It 'Should return true for the AllowIPVideo property from the Get method' { - (Get-TargetResource @testParams).AllowIPVideo | Should -Be $True + (Get-TargetResource @testParams).AllowIPVideo | Should -Be $true } It 'Should return false from the Test method' { diff --git a/docs/docs/resources/azure-ad/AADEntitlementManagementConnectedOrganization.md b/docs/docs/resources/azure-ad/AADEntitlementManagementConnectedOrganization.md index 6c2914836d..fce8dfcbf3 100644 --- a/docs/docs/resources/azure-ad/AADEntitlementManagementConnectedOrganization.md +++ b/docs/docs/resources/azure-ad/AADEntitlementManagementConnectedOrganization.md @@ -47,7 +47,7 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - EntitlementManagement.Read.All, EntitlementManagement.ReadWrite.All + - EntitlementManagement.Read.All - **Update** @@ -57,7 +57,7 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - EntitlementManagement.Read.All, EntitlementManagement.ReadWrite.All + - EntitlementManagement.Read.All - **Update** diff --git a/docs/docs/resources/azure-ad/AADRoleEligibilityScheduleRequest.md b/docs/docs/resources/azure-ad/AADRoleEligibilityScheduleRequest.md index a01025ad0e..bffe0299bc 100644 --- a/docs/docs/resources/azure-ad/AADRoleEligibilityScheduleRequest.md +++ b/docs/docs/resources/azure-ad/AADRoleEligibilityScheduleRequest.md @@ -112,7 +112,7 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - RoleEligibilitySchedule.ReadWrite.Directory + - RoleEligibilitySchedule.Read.Directory - **Update** diff --git a/docs/docs/resources/exchange/EXOActiveSyncDeviceAccessRule.md b/docs/docs/resources/exchange/EXOActiveSyncDeviceAccessRule.md index de9726e532..89fa8cecdf 100644 --- a/docs/docs/resources/exchange/EXOActiveSyncDeviceAccessRule.md +++ b/docs/docs/resources/exchange/EXOActiveSyncDeviceAccessRule.md @@ -5,7 +5,6 @@ | Parameter | Attribute | DataType | Description | Allowed Values | | --- | --- | --- | --- | --- | | **Identity** | Key | String | The Identity parameter specifies the identity of the device access rule. | | -| **GUID** | Write | String | Unique Identifier. Read-Only | | | **AccessLevel** | Write | String | The AccessLevel parameter specifies whether the devices are allowed, blocked or quarantined. | `Allow`, `Block`, `Quarantine` | | **Characteristic** | Write | String | The Characteristic parameter specifies the device characteristic or category that's used by the rule. | `DeviceModel`, `DeviceType`, `DeviceOS`, `UserAgent`, `XMSWLHeader` | | **QueryString** | Write | String | The QueryString parameter specifies the device identifier that's used by the rule. This parameter uses a text value that's used with Characteristic parameter value to define the device. | | diff --git a/docs/docs/resources/exchange/EXOOfflineAddressBook.md b/docs/docs/resources/exchange/EXOOfflineAddressBook.md index fa73a78e70..e5742b4396 100644 --- a/docs/docs/resources/exchange/EXOOfflineAddressBook.md +++ b/docs/docs/resources/exchange/EXOOfflineAddressBook.md @@ -93,8 +93,8 @@ Configuration Example { Name = "Integration Address Book" AddressLists = @('\All Users') - DiffRetentionPeriod = "30" - IsDefault = $false # Updated Property + DiffRetentionPeriod = "60" # Updated Property + IsDefault = $true Ensure = "Present" Credential = $Credscredential } diff --git a/docs/docs/resources/intune/IntuneDeviceConfigurationScepCertificatePolicyWindows10.md b/docs/docs/resources/intune/IntuneDeviceConfigurationScepCertificatePolicyWindows10.md index 79cc1a4460..588eb97993 100644 --- a/docs/docs/resources/intune/IntuneDeviceConfigurationScepCertificatePolicyWindows10.md +++ b/docs/docs/resources/intune/IntuneDeviceConfigurationScepCertificatePolicyWindows10.md @@ -7,7 +7,7 @@ | **CertificateStore** | Write | String | Target store certificate. Possible values are: user, machine. | `user`, `machine` | | **HashAlgorithm** | Write | String | SCEP Hash Algorithm. Possible values are: sha1, sha2. | `sha1`, `sha2` | | **KeySize** | Write | String | SCEP Key Size. Possible values are: size1024, size2048, size4096. | `size1024`, `size2048`, `size4096` | -| **KeyUsage** | Write | String | SCEP Key Usage. Possible values are: keyEncipherment, digitalSignature. | `keyEncipherment`, `digitalSignature` | +| **KeyUsage** | Write | StringArray[] | SCEP Key Usage. Possible values are: keyEncipherment, digitalSignature. | `keyEncipherment`, `digitalSignature` | | **ScepServerUrls** | Write | StringArray[] | SCEP Server Url(s). | | | **SubjectAlternativeNameFormatString** | Write | String | Custom String that defines the AAD Attribute. | | | **SubjectNameFormatString** | Write | String | Custom format to use with SubjectNameFormat = Custom. Example: CN={{UserName}},E={{EmailAddress}},OU=Enterprise Users,O=Contoso Corporation,L=Redmond,ST=WA,C=US | | @@ -142,7 +142,7 @@ Configuration Example HashAlgorithm = "sha2"; KeySize = "size2048"; KeyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp"; - KeyUsage = "digitalSignature"; + KeyUsage = @("digitalSignature"); RenewalThresholdPercentage = 25; ScepServerUrls = @("https://mydomain.com/certsrv/mscep/mscep.dll"); SubjectAlternativeNameType = "none"; @@ -200,7 +200,7 @@ Configuration Example HashAlgorithm = "sha2"; KeySize = "size2048"; KeyStorageProvider = "useTpmKspOtherwiseUseSoftwareKsp"; - KeyUsage = "digitalSignature"; + KeyUsage = @("digitalSignature"); RenewalThresholdPercentage = 30; # Updated Property ScepServerUrls = @("https://mydomain.com/certsrv/mscep/mscep.dll"); SubjectAlternativeNameType = "none"; diff --git a/docs/docs/resources/sharepoint/SPOAccessControlSettings.md b/docs/docs/resources/sharepoint/SPOAccessControlSettings.md index 7272278b04..70fc31156c 100644 --- a/docs/docs/resources/sharepoint/SPOAccessControlSettings.md +++ b/docs/docs/resources/sharepoint/SPOAccessControlSettings.md @@ -25,6 +25,7 @@ | **CertificatePath** | Write | String | Path to certificate used in service principal usually a PFX file. | | | **CertificateThumbprint** | Write | String | Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication. | | | **ManagedIdentity** | Write | Boolean | Managed ID being used for authentication. | | +| **ConditionalAccessPolicy** | Write | String | Blocks or limits access to SharePoint and OneDrive content from un-managed devices. | `AllowFullAccess`, `AllowLimitedAccess`, `BlockAccess`, `ProtectionLevel` | # SPO Access Control Settings diff --git a/docs/docs/resources/teams/TeamsAppPermissionPolicy.md b/docs/docs/resources/teams/TeamsAppPermissionPolicy.md index adea192f37..54981671f3 100644 --- a/docs/docs/resources/teams/TeamsAppPermissionPolicy.md +++ b/docs/docs/resources/teams/TeamsAppPermissionPolicy.md @@ -44,11 +44,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsAppSetupPolicy.md b/docs/docs/resources/teams/TeamsAppSetupPolicy.md index 4b367832d3..ce03425221 100644 --- a/docs/docs/resources/teams/TeamsAppSetupPolicy.md +++ b/docs/docs/resources/teams/TeamsAppSetupPolicy.md @@ -44,11 +44,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsAudioConferencingPolicy.md b/docs/docs/resources/teams/TeamsAudioConferencingPolicy.md index 58aa90102e..5b8620724c 100644 --- a/docs/docs/resources/teams/TeamsAudioConferencingPolicy.md +++ b/docs/docs/resources/teams/TeamsAudioConferencingPolicy.md @@ -39,11 +39,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsCallHoldPolicy.md b/docs/docs/resources/teams/TeamsCallHoldPolicy.md index 58c8c000f3..ce7fb518a5 100644 --- a/docs/docs/resources/teams/TeamsCallHoldPolicy.md +++ b/docs/docs/resources/teams/TeamsCallHoldPolicy.md @@ -39,11 +39,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsCallParkPolicy.md b/docs/docs/resources/teams/TeamsCallParkPolicy.md index 2ae81d96be..dcd61f6ef1 100644 --- a/docs/docs/resources/teams/TeamsCallParkPolicy.md +++ b/docs/docs/resources/teams/TeamsCallParkPolicy.md @@ -42,11 +42,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsCallQueue.md b/docs/docs/resources/teams/TeamsCallQueue.md index 6c93ecf12f..5496f1c8a1 100644 --- a/docs/docs/resources/teams/TeamsCallQueue.md +++ b/docs/docs/resources/teams/TeamsCallQueue.md @@ -83,11 +83,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsCallingPolicy.md b/docs/docs/resources/teams/TeamsCallingPolicy.md index 53978c5ba9..c493f9ed1f 100644 --- a/docs/docs/resources/teams/TeamsCallingPolicy.md +++ b/docs/docs/resources/teams/TeamsCallingPolicy.md @@ -59,11 +59,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsChannelsPolicy.md b/docs/docs/resources/teams/TeamsChannelsPolicy.md index 279c5730af..71786efc6c 100644 --- a/docs/docs/resources/teams/TeamsChannelsPolicy.md +++ b/docs/docs/resources/teams/TeamsChannelsPolicy.md @@ -46,11 +46,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsClientConfiguration.md b/docs/docs/resources/teams/TeamsClientConfiguration.md index 091eb128b1..0eca16bb44 100644 --- a/docs/docs/resources/teams/TeamsClientConfiguration.md +++ b/docs/docs/resources/teams/TeamsClientConfiguration.md @@ -51,11 +51,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsComplianceRecordingPolicy.md b/docs/docs/resources/teams/TeamsComplianceRecordingPolicy.md index c82b70a65f..c6d6bcf8fa 100644 --- a/docs/docs/resources/teams/TeamsComplianceRecordingPolicy.md +++ b/docs/docs/resources/teams/TeamsComplianceRecordingPolicy.md @@ -42,11 +42,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsCortanaPolicy.md b/docs/docs/resources/teams/TeamsCortanaPolicy.md index 1662b06d23..77711f3472 100644 --- a/docs/docs/resources/teams/TeamsCortanaPolicy.md +++ b/docs/docs/resources/teams/TeamsCortanaPolicy.md @@ -39,11 +39,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsDialInConferencingTenantSettings.md b/docs/docs/resources/teams/TeamsDialInConferencingTenantSettings.md index 3dfe805be0..c3df146713 100644 --- a/docs/docs/resources/teams/TeamsDialInConferencingTenantSettings.md +++ b/docs/docs/resources/teams/TeamsDialInConferencingTenantSettings.md @@ -49,11 +49,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsEmergencyCallingPolicy.md b/docs/docs/resources/teams/TeamsEmergencyCallingPolicy.md index 9acf97d8f0..88f1da5c48 100644 --- a/docs/docs/resources/teams/TeamsEmergencyCallingPolicy.md +++ b/docs/docs/resources/teams/TeamsEmergencyCallingPolicy.md @@ -45,11 +45,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsEnhancedEncryptionPolicy.md b/docs/docs/resources/teams/TeamsEnhancedEncryptionPolicy.md index 6936115dad..34dd107d63 100644 --- a/docs/docs/resources/teams/TeamsEnhancedEncryptionPolicy.md +++ b/docs/docs/resources/teams/TeamsEnhancedEncryptionPolicy.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsEventsPolicy.md b/docs/docs/resources/teams/TeamsEventsPolicy.md index 3191a689fa..c16254da1d 100644 --- a/docs/docs/resources/teams/TeamsEventsPolicy.md +++ b/docs/docs/resources/teams/TeamsEventsPolicy.md @@ -48,11 +48,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsFederationConfiguration.md b/docs/docs/resources/teams/TeamsFederationConfiguration.md index 90e9481a2f..6a1c805e18 100644 --- a/docs/docs/resources/teams/TeamsFederationConfiguration.md +++ b/docs/docs/resources/teams/TeamsFederationConfiguration.md @@ -47,11 +47,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsFeedbackPolicy.md b/docs/docs/resources/teams/TeamsFeedbackPolicy.md index e85811f97d..7346a0ed0f 100644 --- a/docs/docs/resources/teams/TeamsFeedbackPolicy.md +++ b/docs/docs/resources/teams/TeamsFeedbackPolicy.md @@ -45,11 +45,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsFilesPolicy.md b/docs/docs/resources/teams/TeamsFilesPolicy.md index e9986b58a8..37d5fbcc98 100644 --- a/docs/docs/resources/teams/TeamsFilesPolicy.md +++ b/docs/docs/resources/teams/TeamsFilesPolicy.md @@ -41,11 +41,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsGroupPolicyAssignment.md b/docs/docs/resources/teams/TeamsGroupPolicyAssignment.md index 6bab7bfdd3..4b758add75 100644 --- a/docs/docs/resources/teams/TeamsGroupPolicyAssignment.md +++ b/docs/docs/resources/teams/TeamsGroupPolicyAssignment.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsGuestCallingConfiguration.md b/docs/docs/resources/teams/TeamsGuestCallingConfiguration.md index 9f72539d71..67724658a8 100644 --- a/docs/docs/resources/teams/TeamsGuestCallingConfiguration.md +++ b/docs/docs/resources/teams/TeamsGuestCallingConfiguration.md @@ -38,11 +38,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsGuestMeetingConfiguration.md b/docs/docs/resources/teams/TeamsGuestMeetingConfiguration.md index 5aad313ee1..3bb1d96cb7 100644 --- a/docs/docs/resources/teams/TeamsGuestMeetingConfiguration.md +++ b/docs/docs/resources/teams/TeamsGuestMeetingConfiguration.md @@ -9,6 +9,7 @@ | **LiveCaptionsEnabledType** | Write | String | Determines whether real-time captions are available for guests in Teams meetings. | `Disabled`, `DisabledUserOverride` | | **ScreenSharingMode** | Write | String | Determines the mode in which guests can share a screen in calls or meetings. Set this to SingleApplication to allow the user to share an application at a given point in time. Set this to EntireScreen to allow the user to share anything on their screens. Set this to Disabled to prohibit the user from sharing their screens. | `Disabled`, `EntireScreen`, `SingleApplication` | | **AllowMeetNow** | Write | Boolean | Determines whether guests can start ad-hoc meetings. Set this to TRUE to allow guests to start ad-hoc meetings. Set this to FALSE to prohibit guests from starting ad-hoc meetings. | | +| **AllowTranscription** | Write | Boolean | Determines whether guests can enable post-meeting captions and transcriptions in meetings. Set this to TRUE to allow. Set this to FALSE to prohibit. | | | **Credential** | Write | PSCredential | Credentials of the Teams Admin | | | **ApplicationId** | Write | String | Id of the Azure Active Directory application to authenticate with. | | | **TenantId** | Write | String | Name of the Azure Active Directory tenant used for authentication. Format contoso.onmicrosoft.com | | @@ -41,11 +42,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples @@ -68,11 +69,13 @@ Configuration Example { TeamsGuestMeetingConfiguration 'TeamsGuestMeetingConfiguration' { - Identity = "Global" - AllowIPVideo = $True - AllowMeetNow = $True - ScreenSharingMode = "EntireScreen" - Credential = $Credscredential + Identity = 'Global' + AllowIPVideo = $true + LiveCaptionsEnabledType = 'Disabled' + ScreenSharingMode = 'EntireScreen' + AllowMeetNow = $true + AllowTranscription = $true + Credential = $Credscredential } } } diff --git a/docs/docs/resources/teams/TeamsGuestMessagingConfiguration.md b/docs/docs/resources/teams/TeamsGuestMessagingConfiguration.md index 0e2e710589..9a00b4bd83 100644 --- a/docs/docs/resources/teams/TeamsGuestMessagingConfiguration.md +++ b/docs/docs/resources/teams/TeamsGuestMessagingConfiguration.md @@ -46,11 +46,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsIPPhonePolicy.md b/docs/docs/resources/teams/TeamsIPPhonePolicy.md index 33c3137d97..2c9e385946 100644 --- a/docs/docs/resources/teams/TeamsIPPhonePolicy.md +++ b/docs/docs/resources/teams/TeamsIPPhonePolicy.md @@ -44,11 +44,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsMeetingBroadcastConfiguration.md b/docs/docs/resources/teams/TeamsMeetingBroadcastConfiguration.md index a8aa7c45fc..11d4bd0b09 100644 --- a/docs/docs/resources/teams/TeamsMeetingBroadcastConfiguration.md +++ b/docs/docs/resources/teams/TeamsMeetingBroadcastConfiguration.md @@ -43,11 +43,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsMeetingBroadcastPolicy.md b/docs/docs/resources/teams/TeamsMeetingBroadcastPolicy.md index 51d09e22e0..f0deee833a 100644 --- a/docs/docs/resources/teams/TeamsMeetingBroadcastPolicy.md +++ b/docs/docs/resources/teams/TeamsMeetingBroadcastPolicy.md @@ -42,11 +42,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsMeetingConfiguration.md b/docs/docs/resources/teams/TeamsMeetingConfiguration.md index e72dbf2ef4..c8a0d64ce4 100644 --- a/docs/docs/resources/teams/TeamsMeetingConfiguration.md +++ b/docs/docs/resources/teams/TeamsMeetingConfiguration.md @@ -50,11 +50,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsMeetingPolicy.md b/docs/docs/resources/teams/TeamsMeetingPolicy.md index ae74df5e1e..788eebc94e 100644 --- a/docs/docs/resources/teams/TeamsMeetingPolicy.md +++ b/docs/docs/resources/teams/TeamsMeetingPolicy.md @@ -101,11 +101,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsMessagingPolicy.md b/docs/docs/resources/teams/TeamsMessagingPolicy.md index 34b002a9a9..b0350e4046 100644 --- a/docs/docs/resources/teams/TeamsMessagingPolicy.md +++ b/docs/docs/resources/teams/TeamsMessagingPolicy.md @@ -63,11 +63,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsMobilityPolicy.md b/docs/docs/resources/teams/TeamsMobilityPolicy.md index 885d5d5180..79cc6560d4 100644 --- a/docs/docs/resources/teams/TeamsMobilityPolicy.md +++ b/docs/docs/resources/teams/TeamsMobilityPolicy.md @@ -41,11 +41,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsNetworkRoamingPolicy.md b/docs/docs/resources/teams/TeamsNetworkRoamingPolicy.md index 459a8c1e19..6739e33279 100644 --- a/docs/docs/resources/teams/TeamsNetworkRoamingPolicy.md +++ b/docs/docs/resources/teams/TeamsNetworkRoamingPolicy.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsOnlineVoiceUser.md b/docs/docs/resources/teams/TeamsOnlineVoiceUser.md index 1ffbdd96a4..b9980c2f6f 100644 --- a/docs/docs/resources/teams/TeamsOnlineVoiceUser.md +++ b/docs/docs/resources/teams/TeamsOnlineVoiceUser.md @@ -39,11 +39,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsOnlineVoicemailPolicy.md b/docs/docs/resources/teams/TeamsOnlineVoicemailPolicy.md index d66f177c39..283ed10ae4 100644 --- a/docs/docs/resources/teams/TeamsOnlineVoicemailPolicy.md +++ b/docs/docs/resources/teams/TeamsOnlineVoicemailPolicy.md @@ -49,11 +49,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsOnlineVoicemailUserSettings.md b/docs/docs/resources/teams/TeamsOnlineVoicemailUserSettings.md index b783b80581..f95bf92464 100644 --- a/docs/docs/resources/teams/TeamsOnlineVoicemailUserSettings.md +++ b/docs/docs/resources/teams/TeamsOnlineVoicemailUserSettings.md @@ -47,11 +47,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsOrgWideAppSettings.md b/docs/docs/resources/teams/TeamsOrgWideAppSettings.md index 77ca71aa99..6b2eaabbb8 100644 --- a/docs/docs/resources/teams/TeamsOrgWideAppSettings.md +++ b/docs/docs/resources/teams/TeamsOrgWideAppSettings.md @@ -36,11 +36,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - None + - Organization.Read.All - **Update** - - None + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsPstnUsage.md b/docs/docs/resources/teams/TeamsPstnUsage.md index 2249dddfb7..983fd726a9 100644 --- a/docs/docs/resources/teams/TeamsPstnUsage.md +++ b/docs/docs/resources/teams/TeamsPstnUsage.md @@ -39,11 +39,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsShiftsPolicy.md b/docs/docs/resources/teams/TeamsShiftsPolicy.md index e03377d512..26e7a8d8ef 100644 --- a/docs/docs/resources/teams/TeamsShiftsPolicy.md +++ b/docs/docs/resources/teams/TeamsShiftsPolicy.md @@ -44,11 +44,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsTeam.md b/docs/docs/resources/teams/TeamsTeam.md index d45236e6ea..f624b4c769 100644 --- a/docs/docs/resources/teams/TeamsTeam.md +++ b/docs/docs/resources/teams/TeamsTeam.md @@ -52,17 +52,17 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Update** - - Group.ReadWrite.All, User.Read.All + - None #### Application permissions - **Read** - - None + - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All - **Update** - - Group.ReadWrite.All, User.Read.All + - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All ## Examples diff --git a/docs/docs/resources/teams/TeamsTemplatesPolicy.md b/docs/docs/resources/teams/TeamsTemplatesPolicy.md index ae5e4dc6bd..3f9e0ab27a 100644 --- a/docs/docs/resources/teams/TeamsTemplatesPolicy.md +++ b/docs/docs/resources/teams/TeamsTemplatesPolicy.md @@ -41,11 +41,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsTenantDialPlan.md b/docs/docs/resources/teams/TeamsTenantDialPlan.md index 81fa2c6813..b41d46cde7 100644 --- a/docs/docs/resources/teams/TeamsTenantDialPlan.md +++ b/docs/docs/resources/teams/TeamsTenantDialPlan.md @@ -56,11 +56,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsTenantNetworkRegion.md b/docs/docs/resources/teams/TeamsTenantNetworkRegion.md index 4800c0f10c..3c52bc363c 100644 --- a/docs/docs/resources/teams/TeamsTenantNetworkRegion.md +++ b/docs/docs/resources/teams/TeamsTenantNetworkRegion.md @@ -39,11 +39,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsTenantNetworkSite.md b/docs/docs/resources/teams/TeamsTenantNetworkSite.md index 40ce3739c5..93d1ec7f8c 100644 --- a/docs/docs/resources/teams/TeamsTenantNetworkSite.md +++ b/docs/docs/resources/teams/TeamsTenantNetworkSite.md @@ -45,11 +45,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsTenantNetworkSubnet.md b/docs/docs/resources/teams/TeamsTenantNetworkSubnet.md index a4455fe902..a6af9ccbbb 100644 --- a/docs/docs/resources/teams/TeamsTenantNetworkSubnet.md +++ b/docs/docs/resources/teams/TeamsTenantNetworkSubnet.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsTenantTrustedIPAddress.md b/docs/docs/resources/teams/TeamsTenantTrustedIPAddress.md index 627539400b..0ea0c85aa8 100644 --- a/docs/docs/resources/teams/TeamsTenantTrustedIPAddress.md +++ b/docs/docs/resources/teams/TeamsTenantTrustedIPAddress.md @@ -21,6 +21,30 @@ As an Admin, you can use the Windows PowerShell command, New-CsTenantTrustedIPAd ## Permissions +### Microsoft Graph + +To authenticate with the Microsoft Graph API, this resource required the following permissions: + +#### Delegated permissions + +- **Read** + + - None + +- **Update** + + - None + +#### Application permissions + +- **Read** + + - Organization.Read.All + +- **Update** + + - Organization.Read.All + ## Examples ### Example 1 diff --git a/docs/docs/resources/teams/TeamsTranslationRule.md b/docs/docs/resources/teams/TeamsTranslationRule.md index 723c968fa6..bcde6a9889 100644 --- a/docs/docs/resources/teams/TeamsTranslationRule.md +++ b/docs/docs/resources/teams/TeamsTranslationRule.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsUnassignedNumberTreatment.md b/docs/docs/resources/teams/TeamsUnassignedNumberTreatment.md index 6c111e8968..b40e698e06 100644 --- a/docs/docs/resources/teams/TeamsUnassignedNumberTreatment.md +++ b/docs/docs/resources/teams/TeamsUnassignedNumberTreatment.md @@ -42,11 +42,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsUpdateManagementPolicy.md b/docs/docs/resources/teams/TeamsUpdateManagementPolicy.md index 7451fa8b04..fd57817eee 100644 --- a/docs/docs/resources/teams/TeamsUpdateManagementPolicy.md +++ b/docs/docs/resources/teams/TeamsUpdateManagementPolicy.md @@ -45,11 +45,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsUpgradeConfiguration.md b/docs/docs/resources/teams/TeamsUpgradeConfiguration.md index e1c9634998..890343eae8 100644 --- a/docs/docs/resources/teams/TeamsUpgradeConfiguration.md +++ b/docs/docs/resources/teams/TeamsUpgradeConfiguration.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsUpgradePolicy.md b/docs/docs/resources/teams/TeamsUpgradePolicy.md index 0e6b95be61..c9ec3b27ff 100644 --- a/docs/docs/resources/teams/TeamsUpgradePolicy.md +++ b/docs/docs/resources/teams/TeamsUpgradePolicy.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsUserCallingSettings.md b/docs/docs/resources/teams/TeamsUserCallingSettings.md index 4dd57c90d4..38375b3ed3 100644 --- a/docs/docs/resources/teams/TeamsUserCallingSettings.md +++ b/docs/docs/resources/teams/TeamsUserCallingSettings.md @@ -50,11 +50,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - None + - Organization.Read.All - **Update** - - None + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsUserPolicyAssignment.md b/docs/docs/resources/teams/TeamsUserPolicyAssignment.md index 46de0d3eb6..9d6158d1a9 100644 --- a/docs/docs/resources/teams/TeamsUserPolicyAssignment.md +++ b/docs/docs/resources/teams/TeamsUserPolicyAssignment.md @@ -59,11 +59,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsVdiPolicy.md b/docs/docs/resources/teams/TeamsVdiPolicy.md index 0cf0a7655d..a2a13e5de8 100644 --- a/docs/docs/resources/teams/TeamsVdiPolicy.md +++ b/docs/docs/resources/teams/TeamsVdiPolicy.md @@ -40,11 +40,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsVoiceRoute.md b/docs/docs/resources/teams/TeamsVoiceRoute.md index f194d9db01..613a456b27 100644 --- a/docs/docs/resources/teams/TeamsVoiceRoute.md +++ b/docs/docs/resources/teams/TeamsVoiceRoute.md @@ -44,11 +44,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsVoiceRoutingPolicy.md b/docs/docs/resources/teams/TeamsVoiceRoutingPolicy.md index 96252959c4..cf7f75ac6a 100644 --- a/docs/docs/resources/teams/TeamsVoiceRoutingPolicy.md +++ b/docs/docs/resources/teams/TeamsVoiceRoutingPolicy.md @@ -41,11 +41,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples diff --git a/docs/docs/resources/teams/TeamsWorkloadPolicy.md b/docs/docs/resources/teams/TeamsWorkloadPolicy.md index bfa304ab20..b1396a9152 100644 --- a/docs/docs/resources/teams/TeamsWorkloadPolicy.md +++ b/docs/docs/resources/teams/TeamsWorkloadPolicy.md @@ -45,11 +45,11 @@ To authenticate with the Microsoft Graph API, this resource required the followi - **Read** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All - **Update** - - Organization.Read.All, User.Read.All, Group.ReadWrite.All, AppCatalog.ReadWrite.All, TeamSettings.ReadWrite.All, Channel.Delete.All, ChannelSettings.ReadWrite.All, ChannelMember.ReadWrite.All + - Organization.Read.All ## Examples