Posh365

0.9.196

Public/Roles/Get-ComplianceRoleReport.ps1

function Get-ComplianceRoleReport {
    [CmdletBinding()]
    param (
        [Parameter()]
        [hashtable]
        $MFAHash
    )
    $ComplianceRoleList = Get-RoleGroup -ResultSize Unlimited
    switch ($PSBoundParameters.Keys) {
        MFAHash {
            foreach ($ComplianceRole in $ComplianceRoleList) {
                Write-Verbose "Processing $($ComplianceRole.DisplayName)"
                $RoleMemberList = Get-RoleGroupMember -Identity $ComplianceRole.Identity -ResultSize Unlimited
                foreach ($RoleMember in $RoleMemberList) {
                    [PSCustomObject]@{
                        'Role'              = $ComplianceRole.DisplayName
                        'DisplayName'       = $RoleMember.DisplayName
                        'UserPrincipalName' = $MFAHash[$RoleMember.ExternalDirectoryObjectId].UserPrincipalName
                        'IsLicensed'        = $MFAHash[$RoleMember.ExternalDirectoryObjectId].IsLicensed
                        'LastDirSyncTime'   = $MFAHash[$RoleMember.ExternalDirectoryObjectId].LastDirSyncTime
                        'MFA_State'         = $MFAHash[$RoleMember.ExternalDirectoryObjectId].MFA_State
                        'RoleDescription'   = $ComplianceRole.Description
                    }
                }
            }
        }
        Default {
            foreach ($ComplianceRole in $ComplianceRoleList) {
                Write-Verbose "Processing $($ComplianceRole.DisplayName)"
                $RoleMemberList = Get-RoleGroupMember -Identity $ComplianceRole.Identity -ResultSize Unlimited
                foreach ($RoleMember in $RoleMemberList) {
                    [PSCustomObject]@{
                        'Role'              = $ComplianceRole.DisplayName
                        'DisplayName'       = $RoleMember.DisplayName
                        'UserPrincipalName' = ""
                        'IsLicensed'        = ""
                        'LastDirSyncTime'   = ""
                        'MFA_State'         = ""
                        'RoleDescription'   = $ComplianceRole.Description
                    }
                }
            }
        }
    }

}