EntraProvisionOnDemand

1.0.2

Public/Get-EntraProvisioningLog.ps1

                                function Get-EntraProvisioningLog {

    <#

    .SYNOPSIS

        Queries Entra ID provisioning logs for audit and troubleshooting.

    .DESCRIPTION

        Retrieves provisioning log entries from Microsoft Graph auditLogs/provisioning

        endpoint. Supports filtering by job ID, status, user, date range, and more.

        Useful for:

        - Troubleshooting provisioning failures

        - Extracting users for re-provisioning

        - Auditing provisioning operations

        - Monitoring sync health

    .PARAMETER JobId

        Filter logs by specific synchronization job ID.

    .PARAMETER ServicePrincipalId

        Filter logs by service principal (application) ID.

    .PARAMETER Status

        Filter by provisioning status: Success, Failure, Skipped, Warning.

    .PARAMETER Action

        Filter by provisioning action: Create, Update, Delete, Disable, StagedDelete, Other.

    .PARAMETER SourceIdentity

        Filter by source identity display name or ID (partial match supported).

    .PARAMETER TargetIdentity

        Filter by target identity display name or ID (partial match supported).

    .PARAMETER StartTime

        Filter logs from this date/time (UTC).

    .PARAMETER EndTime

        Filter logs until this date/time (UTC). Defaults to current time.

    .PARAMETER Top

        Maximum number of results to return. Default is 100.

    .PARAMETER All

        Return all matching results (may be slow for large result sets).

    .EXAMPLE

        Get-EntraProvisioningLog -JobId "AD2AADProvisioning..." -StartTime (Get-Date).AddDays(-1)

        Gets provisioning logs for the last 24 hours for a specific job.

    .EXAMPLE

        Get-EntraProvisioningLog -Status 'Failure' -StartTime (Get-Date).AddDays(-7)

        Gets all failed provisioning operations from the last week.

    .EXAMPLE

        Get-EntraProvisioningLog -JobId $jobId -Status 'Failure' |

            Select-Object @{N='ObjectId';E={$_.SourceIdentity.Id}} |

            Invoke-EntraProvisionOnDemandBatch -ServicePrincipalId $appId -JobId $jobId

        Re-provisions failed users by piping log results to batch provisioning.

    .EXAMPLE

        Get-EntraProvisioningLog -SourceIdentity "john.doe" -All

        Gets all provisioning logs for a specific user.

    .OUTPUTS

        Returns PSCustomObjects with provisioning log details.

    #>

    [CmdletBinding()]

    param(

        [Parameter(Mandatory = $false)]

        [string]$JobId,

        [Parameter(Mandatory = $false)]

        [string]$ServicePrincipalId,

        [Parameter(Mandatory = $false)]

        [ValidateSet('Success', 'Failure', 'Skipped', 'Warning')]

        [string]$Status,

        [Parameter(Mandatory = $false)]

        [ValidateSet('Create', 'Update', 'Delete', 'Disable', 'StagedDelete', 'Other')]

        [string]$Action,

        [Parameter(Mandatory = $false)]

        [string]$SourceIdentity,

        [Parameter(Mandatory = $false)]

        [string]$TargetIdentity,

        [Parameter(Mandatory = $false)]

        [DateTime]$StartTime,

        [Parameter(Mandatory = $false)]

        [DateTime]$EndTime,

        [Parameter(Mandatory = $false)]

        [ValidateRange(1, 999)]

        [int]$Top = 100,

        [Parameter(Mandatory = $false)]

        [switch]$All

    )

    $baseUri = $script:GraphSettings.BaseUri

    try {

        # Build filter query

        # Note: The provisioning logs API has limited filter support

        # Supported OData filters vary - use client-side filtering for reliability

        $filters = @()

        if ($JobId) {

            $filters += "jobId eq '$JobId'"

        }

        # Note: servicePrincipal/id filter not supported, will filter client-side

        $clientSideServicePrincipalFilter = $ServicePrincipalId

        # Status filter - move to client-side as statusInfo/status often fails

        $clientSideStatusFilter = $Status

        if ($Action) {

            $actionValue = switch ($Action) {

                'Create' { 'create' }

                'Update' { 'update' }

                'Delete' { 'delete' }

                'Disable' { 'disable' }

                'StagedDelete' { 'stagedDelete' }

                'Other' { 'other' }

            }

            $filters += "provisioningAction eq '$actionValue'"

        }

        if ($StartTime) {

            # DateTime must be in ISO 8601 format for OData

            $startTimeUtc = $StartTime.ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffffffZ')

            $filters += "activityDateTime ge $startTimeUtc"

        }

        if ($EndTime) {

            $endTimeUtc = $EndTime.ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ss.fffffffZ')

            $filters += "activityDateTime le $endTimeUtc"

        }

        # Build URI - don't URL encode the filter, Graph API handles it

        $uri = "$baseUri/auditLogs/provisioning"

        $queryParams = @()

        if ($filters.Count -gt 0) {

            $filterString = $filters -join ' and '

            $queryParams += "`$filter=$filterString"

        }

        if (-not $All) {

            $queryParams += "`$top=$Top"

        }

        # Note: orderby not always supported on provisioning logs, removed to avoid errors

        # Results are typically returned in reverse chronological order by default

        if ($queryParams.Count -gt 0) {

            $uri += "?" + ($queryParams -join '&')

        }

        Write-Verbose "Querying: $uri"

        $allResults = @()

        do {

            $response = Invoke-GraphRequest -Uri $uri -Method GET

            foreach ($log in $response.value) {

                # Apply client-side filters that aren't supported by API

                $include = $true

                # ServicePrincipalId filter (not supported server-side)

                if ($clientSideServicePrincipalFilter -and $include) {

                    if ($log.servicePrincipal.id -ne $clientSideServicePrincipalFilter) {

                        $include = $false

                    }

                }

                # Status filter (client-side for reliability)

                if ($clientSideStatusFilter -and $include) {

                    $expectedStatus = switch ($clientSideStatusFilter) {

                        'Success' { 'success' }

                        'Failure' { 'failure' }

                        'Skipped' { 'skipped' }

                        'Warning' { 'warning' }

                    }

                    if ($log.provisioningStatusInfo.status -ne $expectedStatus) {

                        $include = $false

                    }

                }

                if ($SourceIdentity -and $include) {

                    $sourceMatch = ($log.sourceIdentity.displayName -like "*$SourceIdentity*") -or

                                   ($log.sourceIdentity.id -like "*$SourceIdentity*")

                    if (-not $sourceMatch) { $include = $false }

                }

                if ($TargetIdentity -and $include) {

                    $targetMatch = ($log.targetIdentity.displayName -like "*$TargetIdentity*") -or

                                   ($log.targetIdentity.id -like "*$TargetIdentity*")

                    if (-not $targetMatch) { $include = $false }

                }

                if ($include) {

                    $allResults += [PSCustomObject]@{

                        PSTypeName           = 'EntraProvisionOnDemand.ProvisioningLogEntry'

                        Id                   = $log.id

                        ActivityDateTime     = [DateTime]$log.activityDateTime

                        TenantId             = $log.tenantId

                        JobId                = $log.jobId

                        CycleId              = $log.cycleId

                        ChangeId             = $log.changeId

                        Action               = $log.provisioningAction

                        DurationMs           = $log.durationInMilliseconds

                        # Status info (API uses provisioningStatusInfo)

                        Status               = $log.provisioningStatusInfo.status

                        StatusErrorCategory  = $log.provisioningStatusInfo.errorInformation.errorCategory

                        StatusErrorCode      = $log.provisioningStatusInfo.errorInformation.errorCode

                        StatusReason         = $log.provisioningStatusInfo.errorInformation.reason

                        # Source identity

                        SourceIdentity       = [PSCustomObject]@{

                            Id              = $log.sourceIdentity.id

                            DisplayName     = $log.sourceIdentity.displayName

                            Type            = $log.sourceIdentity.identityType

                            Details         = $log.sourceIdentity.details

                        }

                        # Target identity

                        TargetIdentity       = [PSCustomObject]@{

                            Id              = $log.targetIdentity.id

                            DisplayName     = $log.targetIdentity.displayName

                            Type            = $log.targetIdentity.identityType

                            Details         = $log.targetIdentity.details

                        }

                        # Additional details

                        SourceSystem         = $log.sourceSystem.displayName

                        TargetSystem         = $log.targetSystem.displayName

                        InitiatedBy          = $log.initiatedBy

                        ServicePrincipal     = [PSCustomObject]@{

                            Id              = $log.servicePrincipal.id

                            DisplayName     = $log.servicePrincipal.displayName

                        }

                        # Provisioning steps

                        ProvisioningSteps    = $log.provisioningSteps

                        ModifiedProperties   = $log.modifiedProperties

                        # Raw response for advanced scenarios

                        RawLog               = $log

                    }

                }

            }

            # Get next page if available and we want all results

            $uri = if ($All) { $response.'@odata.nextLink' } else { $null }

            # Respect rate limits when paging

            if ($uri) {

                Start-Sleep -Milliseconds 500

            }

        } while ($uri)

        Write-Verbose "Retrieved $($allResults.Count) provisioning log entries."

        return $allResults

    }

    catch {

        throw "Failed to get provisioning logs: $_"

    }

}

# SIG # Begin signature block

# MIIoYgYJKoZIhvcNAQcCoIIoUzCCKE8CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDPiY5jeSrYgA+i

# R6Aa+/Se25yH2WS3jyCmskhhxuojOKCCIV8wggWNMIIEdaADAgECAhAOmxiO+dAt

# 5+/bUOIIQBhaMA0GCSqGSIb3DQEBDAUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK

# EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV

# BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0yMjA4MDEwMDAwMDBa

# Fw0zMTExMDkyMzU5NTlaMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2Vy

# dCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lD

# ZXJ0IFRydXN0ZWQgUm9vdCBHNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC

# ggIBAL/mkHNo3rvkXUo8MCIwaTPswqclLskhPfKK2FnC4SmnPVirdprNrnsbhA3E

# MB/zG6Q4FutWxpdtHauyefLKEdLkX9YFPFIPUh/GnhWlfr6fqVcWWVVyr2iTcMKy

# unWZanMylNEQRBAu34LzB4TmdDttceItDBvuINXJIB1jKS3O7F5OyJP4IWGbNOsF

# xl7sWxq868nPzaw0QF+xembud8hIqGZXV59UWI4MK7dPpzDZVu7Ke13jrclPXuU1

# 5zHL2pNe3I6PgNq2kZhAkHnDeMe2scS1ahg4AxCN2NQ3pC4FfYj1gj4QkXCrVYJB

# MtfbBHMqbpEBfCFM1LyuGwN1XXhm2ToxRJozQL8I11pJpMLmqaBn3aQnvKFPObUR

# WBf3JFxGj2T3wWmIdph2PVldQnaHiZdpekjw4KISG2aadMreSx7nDmOu5tTvkpI6

# nj3cAORFJYm2mkQZK37AlLTSYW3rM9nF30sEAMx9HJXDj/chsrIRt7t/8tWMcCxB

# YKqxYxhElRp2Yn72gLD76GSmM9GJB+G9t+ZDpBi4pncB4Q+UDCEdslQpJYls5Q5S

# UUd0viastkF13nqsX40/ybzTQRESW+UQUOsxxcpyFiIJ33xMdT9j7CFfxCBRa2+x

# q4aLT8LWRV+dIPyhHsXAj6KxfgommfXkaS+YHS312amyHeUbAgMBAAGjggE6MIIB

# NjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTs1+OC0nFdZEzfLmc/57qYrhwP

# TzAfBgNVHSMEGDAWgBRF66Kv9JLLgjEtUYunpyGd823IDzAOBgNVHQ8BAf8EBAMC

# AYYweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp

# Y2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv

# bS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcnQwRQYDVR0fBD4wPDA6oDigNoY0

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEUm9vdENB

# LmNybDARBgNVHSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQEMBQADggEBAHCgv0Nc

# Vec4X6CjdBs9thbX979XB72arKGHLOyFXqkauyL4hxppVCLtpIh3bb0aFPQTSnov

# Lbc47/T/gLn4offyct4kvFIDyE7QKt76LVbP+fT3rDB6mouyXtTP0UNEm0Mh65Zy

# oUi0mcudT6cGAxN3J0TU53/oWajwvy8LpunyNDzs9wPHh6jSTEAZNUZqaVSwuKFW

# juyk1T3osdz9HNj0d1pcVIxv76FQPfx2CWiEn2/K2yCNNWAcAgPLILCsWKAOQGPF

# mCLBsln1VWvPJ6tsds5vIy30fnFqI2si/xK4VC0nftg62fC2h5b9W9FcrBjDTZ9z

# twGpn1eqXijiuZQwggawMIIEmKADAgECAhAIrUCyYNKcTJ9ezam9k67ZMA0GCSqG

# SIb3DQEBDAUAMGIxCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMx

# GTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRy

# dXN0ZWQgUm9vdCBHNDAeFw0yMTA0MjkwMDAwMDBaFw0zNjA0MjgyMzU5NTlaMGkx

# CzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4

# RGlnaUNlcnQgVHJ1c3RlZCBHNCBDb2RlIFNpZ25pbmcgUlNBNDA5NiBTSEEzODQg

# MjAyMSBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDVtC9C0Cit

# eLdd1TlZG7GIQvUzjOs9gZdwxbvEhSYwn6SOaNhc9es0JAfhS0/TeEP0F9ce2vnS

# 1WcaUk8OoVf8iJnBkcyBAz5NcCRks43iCH00fUyAVxJrQ5qZ8sU7H/Lvy0daE6ZM

# swEgJfMQ04uy+wjwiuCdCcBlp/qYgEk1hz1RGeiQIXhFLqGfLOEYwhrMxe6TSXBC

# Mo/7xuoc82VokaJNTIIRSFJo3hC9FFdd6BgTZcV/sk+FLEikVoQ11vkunKoAFdE3

# /hoGlMJ8yOobMubKwvSnowMOdKWvObarYBLj6Na59zHh3K3kGKDYwSNHR7OhD26j

# q22YBoMbt2pnLdK9RBqSEIGPsDsJ18ebMlrC/2pgVItJwZPt4bRc4G/rJvmM1bL5

# OBDm6s6R9b7T+2+TYTRcvJNFKIM2KmYoX7BzzosmJQayg9Rc9hUZTO1i4F4z8ujo

# 7AqnsAMrkbI2eb73rQgedaZlzLvjSFDzd5Ea/ttQokbIYViY9XwCFjyDKK05huzU

# tw1T0PhH5nUwjewwk3YUpltLXXRhTT8SkXbev1jLchApQfDVxW0mdmgRQRNYmtwm

# KwH0iU1Z23jPgUo+QEdfyYFQc4UQIyFZYIpkVMHMIRroOBl8ZhzNeDhFMJlP/2NP

# TLuqDQhTQXxYPUez+rbsjDIJAsxsPAxWEQIDAQABo4IBWTCCAVUwEgYDVR0TAQH/

# BAgwBgEB/wIBADAdBgNVHQ4EFgQUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHwYDVR0j

# BBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1Ud

# JQQMMAoGCCsGAQUFBwMDMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0

# cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0

# cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8E

# PDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVz

# dGVkUm9vdEc0LmNybDAcBgNVHSAEFTATMAcGBWeBDAEDMAgGBmeBDAEEATANBgkq

# hkiG9w0BAQwFAAOCAgEAOiNEPY0Idu6PvDqZ01bgAhql+Eg08yy25nRm95RysQDK

# r2wwJxMSnpBEn0v9nqN8JtU3vDpdSG2V1T9J9Ce7FoFFUP2cvbaF4HZ+N3HLIvda

# qpDP9ZNq4+sg0dVQeYiaiorBtr2hSBh+3NiAGhEZGM1hmYFW9snjdufE5BtfQ/g+

# lP92OT2e1JnPSt0o618moZVYSNUa/tcnP/2Q0XaG3RywYFzzDaju4ImhvTnhOE7a

# brs2nfvlIVNaw8rpavGiPttDuDPITzgUkpn13c5UbdldAhQfQDN8A+KVssIhdXNS

# y0bYxDQcoqVLjc1vdjcshT8azibpGL6QB7BDf5WIIIJw8MzK7/0pNVwfiThV9zeK

# iwmhywvpMRr/LhlcOXHhvpynCgbWJme3kuZOX956rEnPLqR0kq3bPKSchh/jwVYb

# KyP/j7XqiHtwa+aguv06P0WmxOgWkVKLQcBIhEuWTatEQOON8BUozu3xGFYHKi8Q

# xAwIZDwzj64ojDzLj4gLDb879M4ee47vtevLt/B3E+bnKD+sEq6lLyJsQfmCXBVm

# zGwOysWGw/YmMwwHS6DTBwJqakAwSEs0qFEgu60bhQjiWQ1tygVQK+pKHJ6l/aCn

# HwZ05/LWUpD9r4VIIflXO7ScA+2GRfS0YW6/aOImYIbqyK+p/pQd52MbOoZWeE4w

# gga0MIIEnKADAgECAhANx6xXBf8hmS5AQyIMOkmGMA0GCSqGSIb3DQEBCwUAMGIx

# CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3

# dy5kaWdpY2VydC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBH

# NDAeFw0yNTA1MDcwMDAwMDBaFw0zODAxMTQyMzU5NTlaMGkxCzAJBgNVBAYTAlVT

# MRcwFQYDVQQKEw5EaWdpQ2VydCwgSW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1

# c3RlZCBHNCBUaW1lU3RhbXBpbmcgUlNBNDA5NiBTSEEyNTYgMjAyNSBDQTEwggIi

# MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0eDHTCphBcr48RsAcrHXbo0Zo

# dLRRF51NrY0NlLWZloMsVO1DahGPNRcybEKq+RuwOnPhof6pvF4uGjwjqNjfEvUi

# 6wuim5bap+0lgloM2zX4kftn5B1IpYzTqpyFQ/4Bt0mAxAHeHYNnQxqXmRinvuNg

# xVBdJkf77S2uPoCj7GH8BLuxBG5AvftBdsOECS1UkxBvMgEdgkFiDNYiOTx4OtiF

# cMSkqTtF2hfQz3zQSku2Ws3IfDReb6e3mmdglTcaarps0wjUjsZvkgFkriK9tUKJ

# m/s80FiocSk1VYLZlDwFt+cVFBURJg6zMUjZa/zbCclF83bRVFLeGkuAhHiGPMvS

# GmhgaTzVyhYn4p0+8y9oHRaQT/aofEnS5xLrfxnGpTXiUOeSLsJygoLPp66bkDX1

# ZlAeSpQl92QOMeRxykvq6gbylsXQskBBBnGy3tW/AMOMCZIVNSaz7BX8VtYGqLt9

# MmeOreGPRdtBx3yGOP+rx3rKWDEJlIqLXvJWnY0v5ydPpOjL6s36czwzsucuoKs7

# Yk/ehb//Wx+5kMqIMRvUBDx6z1ev+7psNOdgJMoiwOrUG2ZdSoQbU2rMkpLiQ6bG

# RinZbI4OLu9BMIFm1UUl9VnePs6BaaeEWvjJSjNm2qA+sdFUeEY0qVjPKOWug/G6

# X5uAiynM7Bu2ayBjUwIDAQABo4IBXTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIBADAd

# BgNVHQ4EFgQU729TSunkBnx6yuKQVvYv1Ensy04wHwYDVR0jBBgwFoAU7NfjgtJx

# XWRM3y5nP+e6mK4cD08wDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF

# BwMIMHcGCCsGAQUFBwEBBGswaTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln

# aWNlcnQuY29tMEEGCCsGAQUFBzAChjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j

# b20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJo

# dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNy

# bDAgBgNVHSAEGTAXMAgGBmeBDAEEAjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQEL

# BQADggIBABfO+xaAHP4HPRF2cTC9vgvItTSmf83Qh8WIGjB/T8ObXAZz8OjuhUxj

# aaFdleMM0lBryPTQM2qEJPe36zwbSI/mS83afsl3YTj+IQhQE7jU/kXjjytJgnn0

# hvrV6hqWGd3rLAUt6vJy9lMDPjTLxLgXf9r5nWMQwr8Myb9rEVKChHyfpzee5kH0

# F8HABBgr0UdqirZ7bowe9Vj2AIMD8liyrukZ2iA/wdG2th9y1IsA0QF8dTXqvcnT

# mpfeQh35k5zOCPmSNq1UH410ANVko43+Cdmu4y81hjajV/gxdEkMx1NKU4uHQcKf

# ZxAvBAKqMVuqte69M9J6A47OvgRaPs+2ykgcGV00TYr2Lr3ty9qIijanrUR3anzE

# wlvzZiiyfTPjLbnFRsjsYg39OlV8cipDoq7+qNNjqFzeGxcytL5TTLL4ZaoBdqbh

# OhZ3ZRDUphPvSRmMThi0vw9vODRzW6AxnJll38F0cuJG7uEBYTptMSbhdhGQDpOX

# gpIUsWTjd6xpR6oaQf/DJbg3s6KCLPAlZ66RzIg9sC+NJpud/v4+7RWsWCiKi9EO

# LLHfMR2ZyJ/+xhCx9yHbxtl5TPau1j/1MIDpMPx0LckTetiSuEtQvLsNz3Qbp7wG

# WqbIiOWCnb5WqxL3/BAPvIXKUjPSxyZsq8WhbaM2tszWkPZPubdcMIIG7TCCBNWg

# AwIBAgIQCoDvGEuN8QWC0cR2p5V0aDANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQG

# EwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xQTA/BgNVBAMTOERpZ2lDZXJ0

# IFRydXN0ZWQgRzQgVGltZVN0YW1waW5nIFJTQTQwOTYgU0hBMjU2IDIwMjUgQ0Ex

# MB4XDTI1MDYwNDAwMDAwMFoXDTM2MDkwMzIzNTk1OVowYzELMAkGA1UEBhMCVVMx

# FzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMTswOQYDVQQDEzJEaWdpQ2VydCBTSEEy

# NTYgUlNBNDA5NiBUaW1lc3RhbXAgUmVzcG9uZGVyIDIwMjUgMTCCAiIwDQYJKoZI

# hvcNAQEBBQADggIPADCCAgoCggIBANBGrC0Sxp7Q6q5gVrMrV7pvUf+GcAoB38o3

# zBlCMGMyqJnfFNZx+wvA69HFTBdwbHwBSOeLpvPnZ8ZN+vo8dE2/pPvOx/Vj8Tch

# TySA2R4QKpVD7dvNZh6wW2R6kSu9RJt/4QhguSssp3qome7MrxVyfQO9sMx6ZAWj

# FDYOzDi8SOhPUWlLnh00Cll8pjrUcCV3K3E0zz09ldQ//nBZZREr4h/GI6Dxb2Uo

# yrN0ijtUDVHRXdmncOOMA3CoB/iUSROUINDT98oksouTMYFOnHoRh6+86Ltc5zjP

# KHW5KqCvpSduSwhwUmotuQhcg9tw2YD3w6ySSSu+3qU8DD+nigNJFmt6LAHvH3KS

# uNLoZLc1Hf2JNMVL4Q1OpbybpMe46YceNA0LfNsnqcnpJeItK/DhKbPxTTuGoX7w

# JNdoRORVbPR1VVnDuSeHVZlc4seAO+6d2sC26/PQPdP51ho1zBp+xUIZkpSFA8vW

# doUoHLWnqWU3dCCyFG1roSrgHjSHlq8xymLnjCbSLZ49kPmk8iyyizNDIXj//cOg

# rY7rlRyTlaCCfw7aSUROwnu7zER6EaJ+AliL7ojTdS5PWPsWeupWs7NpChUk555K

# 096V1hE0yZIXe+giAwW00aHzrDchIc2bQhpp0IoKRR7YufAkprxMiXAJQ1XCmnCf

# gPf8+3mnAgMBAAGjggGVMIIBkTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTkO/zy

# Me39/dfzkXFjGVBDz2GM6DAfBgNVHSMEGDAWgBTvb1NK6eQGfHrK4pBW9i/USezL

# TjAOBgNVHQ8BAf8EBAMCB4AwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwgwgZUGCCsG

# AQUFBwEBBIGIMIGFMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j

# b20wXQYIKwYBBQUHMAKGUWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp

# Q2VydFRydXN0ZWRHNFRpbWVTdGFtcGluZ1JTQTQwOTZTSEEyNTYyMDI1Q0ExLmNy

# dDBfBgNVHR8EWDBWMFSgUqBQhk5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln

# aUNlcnRUcnVzdGVkRzRUaW1lU3RhbXBpbmdSU0E0MDk2U0hBMjU2MjAyNUNBMS5j

# cmwwIAYDVR0gBBkwFzAIBgZngQwBBAIwCwYJYIZIAYb9bAcBMA0GCSqGSIb3DQEB

# CwUAA4ICAQBlKq3xHCcEua5gQezRCESeY0ByIfjk9iJP2zWLpQq1b4URGnwWBdEZ

# D9gBq9fNaNmFj6Eh8/YmRDfxT7C0k8FUFqNh+tshgb4O6Lgjg8K8elC4+oWCqnU/

# ML9lFfim8/9yJmZSe2F8AQ/UdKFOtj7YMTmqPO9mzskgiC3QYIUP2S3HQvHG1FDu

# +WUqW4daIqToXFE/JQ/EABgfZXLWU0ziTN6R3ygQBHMUBaB5bdrPbF6MRYs03h4o

# bEMnxYOX8VBRKe1uNnzQVTeLni2nHkX/QqvXnNb+YkDFkxUGtMTaiLR9wjxUxu2h

# ECZpqyU1d0IbX6Wq8/gVutDojBIFeRlqAcuEVT0cKsb+zJNEsuEB7O7/cuvTQasn

# M9AWcIQfVjnzrvwiCZ85EE8LUkqRhoS3Y50OHgaY7T/lwd6UArb+BOVAkg2oOvol

# /DJgddJ35XTxfUlQ+8Hggt8l2Yv7roancJIFcbojBcxlRcGG0LIhp6GvReQGgMgY

# xQbV1S3CrWqZzBt1R9xJgKf47CdxVRd/ndUlQ05oxYy2zRWVFjF7mcr4C34Mj3oc

# CVccAvlKV9jEnstrniLvUxxVZE/rptb7IRE2lskKPIJgbaP5t2nGj/ULLi49xTcB

# ZU8atufk+EMF/cWuiC7POGT75qaL6vdCvHlshtjdNXOCIUjsarfNZzCCB20wggVV

# oAMCAQICEAnI7Fw0fQcgWcyoNeinb/gwDQYJKoZIhvcNAQELBQAwaTELMAkGA1UE

# BhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2Vy

# dCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENB

# MTAeFw0yMzAzMjkwMDAwMDBaFw0yNjA2MjIyMzU5NTlaMHUxCzAJBgNVBAYTAkFV

# MRgwFgYDVQQIEw9OZXcgU291dGggV2FsZXMxFDASBgNVBAcTC0NoZXJyeWJyb29r

# MRowGAYDVQQKExFEYXJyZW4gSiBSb2JpbnNvbjEaMBgGA1UEAxMRRGFycmVuIEog

# Um9iaW5zb24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDHrKfntVGe

# XaDp6S/nqZuiKuhmIqivGTXM9VwXuzO3gV8FcuLWD+QciGujTkWBLHpVViPV5jtT

# PnD0uo0TK6WW/cbVB/jaSmTvnkrYYEwLZxDtXVmgCumOwB/2VY5oDk1mVwVYm4wB

# PyUCiH2cseB5uRTh+oat27JQPkVEKaNzUMTb9gLs3JCkMG1uwKFyDbnY9HbmAog2

# LIZ//Zh884C9FaTWEaZoBGu1loHNSR9e1fkmJWn+qjFqWKFrjg8Lg5bUh9qee6gC

# Nv+Ceq1GBL57O0GfbICFHRpVK+fen6dGOI7sqclRhO0a9GvD7Qci1lLqcle2eZCj

# 6/zEY3q1wJgZ3+gHYSN5GOho89+en2ZDwOPVLgiFxYMk2U/OAKOipcPtEaie9CQ7

# eOPVJMu4XWvofIdj4lHX+610Gplee5mOufpRwJnOPlIE7lrJ6cJ07jZZG2cUZwsN

# g/lt6raNmgYQ3m3Iimc4r34gFpVn03B7QqcveoDOS/jgeOXsw6VOigB9YcEUozkV

# JVucqBU11Gz1AUX5VNztm2dMHQCXslGGh1gGsjaMhX7ina5gi7SMe9ujtOnc/SoP

# nCX/tWXSeynFL2YEdnfBdfRVeRtQlTJzs4TGUdnZyHieYdBIHDijR5d4TChXVUce

# JYVvLXK0EDeGU9hIBnyPXwXNItxl0xQNMQIDAQABo4ICAzCCAf8wHwYDVR0jBBgw

# FoAUaDfg67Y7+F8Rhvv+YXsIiGX0TkIwHQYDVR0OBBYEFAUxVql07mJzafndN3rN

# ijPSXRlIMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzCBtQYD

# VR0fBIGtMIGqMFOgUaBPhk1odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQyMDIxQ0ExLmNybDBT

# oFGgT4ZNaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0

# Q29kZVNpZ25pbmdSU0E0MDk2U0hBMzg0MjAyMUNBMS5jcmwwPgYDVR0gBDcwNTAz

# BgZngQwBBAEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20v

# Q1BTMIGUBggrBgEFBQcBAQSBhzCBhDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au

# ZGlnaWNlcnQuY29tMFwGCCsGAQUFBzAChlBodHRwOi8vY2FjZXJ0cy5kaWdpY2Vy

# dC5jb20vRGlnaUNlcnRUcnVzdGVkRzRDb2RlU2lnbmluZ1JTQTQwOTZTSEEzODQy

# MDIxQ0ExLmNydDAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQBYQAlozzK3

# Gn8A32eZnv51K5L+MmICIud+XHXTwJv9rMBg07s0lQVRyDAafC1i5s1zwNRm8QTp

# gOC/L7w4IxKUBfSPT4eTDWIGIYNMUqQCKffygKHODkJ8JckRjzfgo2smONMcU8+P

# 4R6IVoOK5yTCLlRI5DLSpzHU26Z6lPOcO/AEJXw+/b/4FkNnS9U959fBzhI07fFU

# rq8ZBIUOSN0h/Aq/WIVL/eDm1iFGzilLeUhu5v3fstpn5CkUjpkZbi0qGCz1m8d+

# aQK7GJGj6Y3+WJeY4iT2NxkMxFP0kVVtK68AwG7SkjdIClrWcYozw27PGkFGAoox

# X43ujlhheEZ5j0kIdBX/AMsz0HMfS40P/Fu4FBC7BOiBblz+W49ouoHi8uuS0XuO

# kGZWA6v2zGs1KGUE5Y3v4bOqZDi+H9Sr+7WyWZjBDVVVESTZng0Xo7zZYh2mhhAL

# /4hdGaO6ar4+MAgghht4/7DUeVkkWJ8X+cUOK/YvYGapOMo8JPwyQltq5ijQlKMT

# SGVodhCJTEg88NwzCpNspWXYmPywIuRpmwshi7erE8/yBNcNTWMK6f8+r+CPdZQ4

# HV4Pn05IYcbeO4VpozDg92WFUhc0JoPGpdYkP/ukWCoH7MMOuLSJMvCTjmV/97LP

# 7ocSlIzycWCZDsEMFMqAGM43LvwBOwctKzGCBlkwggZVAgEBMH0waTELMAkGA1UE

# BhMCVVMxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMUEwPwYDVQQDEzhEaWdpQ2Vy

# dCBUcnVzdGVkIEc0IENvZGUgU2lnbmluZyBSU0E0MDk2IFNIQTM4NCAyMDIxIENB

# MQIQCcjsXDR9ByBZzKg16Kdv+DANBglghkgBZQMEAgEFAKCBhDAYBgorBgEEAYI3

# AgEMMQowCKACgAChAoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3AgEEMBwGCisG

# AQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEiBCAJeN8k4vgc

# /drhAaIt4Gq03vQntaAMmt0uWVANjOkRMTANBgkqhkiG9w0BAQEFAASCAgC095t6

# 9aeTeDMcTX9T++BirLlssT1iRnvpWDdQNotgasn5meHRFEcyNZ6unNRs3HAEoJYA

# EoZlXrzHeg+TjpzYkBncCkvnxHoAltAXJb/U7zkJELUTqTfbewC2vu6f6NlRTy5G

# 2W34xNnniy0k6zWdaBgJGGcb4ayFnY3ZteMo5dUO5sf1SXkmoitDsd+7CQkoosgh

# TIIfhEYeVGLJFQXXAuvQXVv+wrkzTxGB5TQjvqq6tD9R/459auGrtY2fI1KFZFdw

# Z+HItJd4xqYbuMbX0WcEz0o1bLxxRl0fbYVzmcHiNtRcCGmMzX3krfmmtKHQQmaw

# QL+0cINnPWUOkvJAwCkF09RdOQg+bOh6sOuWMxyRhvnDwjuKZuE8XwkdRHNDSvrw

# bDcM5wPwuw3Rq6ChDMFUV9Q23HxoRFH6nblpxMHY4y6vHMrveGglEola8jEsjw9p

# kYQ27nHJz/AJAfiShcf18I+OUVz5BmU3dEY58aHheKDv5YHxE5vwRPIkNILnkQdD

# 2rFrLoJvZWyaUUAOcv8ct7QLd+CezZ/noL5GPPkMaeczJ6MNnsHAqcaqLzsxdHnd

# sHg0OCSkgKwvd17fpzRi87rDSFCscxQjOV3zN8Tc0w3LXLeKJqNk15w8684gAbLj

# FBYiew900TtbtVpQx13uoiT9uE+OGA1tiycYU6GCAyYwggMiBgkqhkiG9w0BCQYx

# ggMTMIIDDwIBATB9MGkxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdpQ2VydCwg

# SW5jLjFBMD8GA1UEAxM4RGlnaUNlcnQgVHJ1c3RlZCBHNCBUaW1lU3RhbXBpbmcg

# UlNBNDA5NiBTSEEyNTYgMjAyNSBDQTECEAqA7xhLjfEFgtHEdqeVdGgwDQYJYIZI

# AWUDBAIBBQCgaTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJ

# BTEPFw0yNjAyMjUwNTIzMTNaMC8GCSqGSIb3DQEJBDEiBCA7qZvqdALX0vCflpAD

# mgSmTSrKW9i8WTRAEL6h7pRcEzANBgkqhkiG9w0BAQEFAASCAgBRTMQgPaxeifgH

# sATEwjE9qZafWaXYD5Co9WamwxUiQN+rVLhrBxFrRats7yVQcOP0sfcc4kPw7mbL

# Oi//0xnkAP6/H5CgFP9RABVRFc6NWmkQNfeM5ppLfmlZ7wY2y2fXnRam0fBb2ZyK

# e1+bc9vQZo66NIOrOAfQ9jjLpvX1GIFCXmVd2KLbWkdGWhuy2vzT6FcBW3VdH9+I

# zVxIYLX7ARk5yiYNRg5soa7iMs7GTAtOzn2P6c+0ZfG73MbbB7p1eAwfPVWo3WK1

# ua7TiUFnn9ebxuJN8WqD0To0UaMWB1E/7ALNtJqqjsoUQ6tTREXBLtxWyGWN9lNR

# dwhK7+44Mro0qJsyXupjxoa61vWFrQGxmGpR2IY/OBgf0fXcEJSutb+Yf4TlhlzZ

# WaNVe1l1EBtE41yThbhcADtCDNI5biWU+hjaavZX8370DAyrntk4IpxO7+NrqD/R

# gHDsJXQpk4OPpUHtV0iFkPjDZS5zWd+TaXo7ws3omyd4NjOXfg1picf7I+R7qHtu

# LRYnuqpuLLqlr2VDof1p3xrOO9R4IQ46YvL9/DIivu7AXh2RjBdfeaxHLxXi/IeC

# QgGtnSSpOMZDXBdyhPllUL+n6uAz15YHWb83/bjFDaZwk9hiLs2JhfW/smnq8775

# HT2GATLIY+jK87hzJKR+K7K/0vE9bg==

# SIG # End signature block