functions/administrativeUnits/Test-TmfAdministrativeUnit.ps1
|
function Test-TmfAdministrativeUnit { [CmdletBinding()] Param ( [System.Management.Automation.PSCmdlet] $Cmdlet = $PSCmdlet ) begin { Test-GraphConnection -Cmdlet $Cmdlet $componentName = "administrativeUnits" $tenant = Get-MgOrganization -Property displayName, Id } process { foreach ($definition in $script:desiredConfiguration[$componentName]) { foreach ($property in $definition.Properties()) { if ($definition.$property.GetType().Name -eq "String") { $definition.$property = Resolve-String -Text $definition.$property } } $result = @{ Tenant = $tenant.displayName TenantId = $tenant.Id ResourceType = 'administrativeUnits' ResourceName = (Resolve-String -Text $definition.displayName) DesiredConfiguration = $definition } if ("oldNames" -in $definition.Properties()) { $filter = ($definition.oldNames + $definition.displayName | Foreach-Object { "(displayName eq '{0}')" -f [System.Web.HttpUtility]::UrlEncode($_) }) -join " or " } else { $filter = "(displayName eq '{0}')" -f [System.Web.HttpUtility]::UrlEncode($definition.displayName) } try { $resource = (Invoke-MgGraphRequest -Method GET -Uri ("$script:graphBaseUrl/administrativeUnits/?`$filter={0}" -f $filter)).Value } catch { Write-PSFMessage -Level Warning -String 'TMF.Error.QueryWithFilterFailed' -StringValues $filter -Tag 'failed' $exception = New-Object System.Data.DataException("Query with filter $filter against Microsoft Graph failed. Error: $_") $errorID = 'QueryWithFilterFailed' $category = [System.Management.Automation.ErrorCategory]::NotSpecified $recordObject = New-Object System.Management.Automation.ErrorRecord($exception, $errorID, $category, $Cmdlet) $cmdlet.ThrowTerminatingError($recordObject) } switch ($resource.Count) { 0 { if ($definition.present) { $result = New-TestResult @result -ActionType "Create" } else { $result = New-TestResult @result -ActionType "NoActionRequired" } } 1 { $result["GraphResource"] = $resource if ($definition.present) { $changes = @() foreach ($property in ($definition.Properties() | Where-Object {$_ -notin "oldNames", "present", "sourceConfig"})) { $change = [PSCustomObject] @{ Property = $property Actions = $null } switch ($property) { "members" { $resourceMembers = (Invoke-MgGraphRequest -Method GET -Uri ("$script:graphBaseUrl/administrativeUnits/{0}/members/$/microsoft.graph.user" -f $resource.Id)).Value.Id; $change.Actions = Compare-ResourceList -ReferenceList $resourceMembers ` -DifferenceList $($definition.members | ForEach-Object {Resolve-User -InputReference $_ -Cmdlet $Cmdlet}) ` -Cmdlet $PSCmdlet } "groups" { $resourceGroups = (Invoke-MgGraphRequest -Method GET -Uri ("$script:graphBaseUrl/administrativeUnits/{0}/members/$/microsoft.graph.group" -f $resource.Id)).Value.Id; $change.Actions = Compare-ResourceList -ReferenceList $resourceGroups ` -DifferenceList $($definition.groups | ForEach-Object {Resolve-Group -InputReference $_ -Cmdlet $Cmdlet}) ` -Cmdlet $PSCmdlet } "scopedRoleMembers" { $resourceScopedRoleMembers = (Invoke-MgGraphRequest -Method GET -Uri ("$script:graphBaseUrl/administrativeUnits/{0}/scopedRoleMembers" -f $resource.Id)).Value ` | Select-Object @{n = "identity"; e = { $_["roleMemberInfo"]["id"] }}, @{n = "role"; e = { $_["roleId"] }}, @{n = "id"; e = { $_["id"] }} $definitionScopedRoleMembers = @() $definition.scopedRoleMembers | Foreach-Object { $identityId = Resolve-User -InputReference $_.identity -Cmdlet $Cmdlet -DontFailIfNotExisting if (-Not $identityId) { $identityId = Resolve-Group -InputReference $_.identity -Cmdlet $Cmdlet } $definitionScopedRoleMembers += [PSCustomObject]@{ identity = $identityId role = Resolve-DirectoryRole -InputReference $_.role -Cmdlet $Cmdlet } } $dummy = Compare-ResourceList -ReferenceList ($resourceScopedRoleMembers | Select-Object role, identity | Foreach-Object {$_ | ConvertTo-Json -Compress}) ` -DifferenceList ($definitionScopedRoleMembers | Select-Object role, identity | Foreach-Object {$_ | ConvertTo-Json -Compress}) ` -Cmdlet $PSCmdlet if ($dummy.Keys.count -gt 0) { $change.Actions = @{} if ($dummy.Keys -contains "Add") { $change.Actions["Add"] = ($dummy["Add"] | Foreach-Object { $_ | ConvertFrom-Json }) } if ($dummy.Keys -contains "Remove") { $change.Actions["Remove"] = @() foreach ($toRemove in ($dummy["Remove"] | Foreach-Object {$_ | ConvertFrom-Json})) { $change.Actions["Remove"] += ($resourceScopedRoleMembers | Where-Object {$_.role -eq $toRemove.role -and $_.identity -eq $toRemove.identity}).id } } } } default { if ($definition.$property -ne $resource.$property) { if(!( ($property -eq "visibility") -and !($resource.$property) -and ($definition.$property -eq "Public") )){ $change.Actions = @{"Set" = $definition.$property}; } } } } if ($change.Actions) {$changes += $change} } if ($changes.count -gt 0) { $result = New-TestResult @result -Changes $changes -ActionType "Update"} else { $result = New-TestResult @result -ActionType "NoActionRequired" } } else { $result = New-TestResult @result -ActionType "Delete" } } default { Write-PSFMessage -Level Warning -String 'TMF.Test.MultipleResourcesError' -StringValues $componentName, $definition.displayName -Tag 'failed' $exception = New-Object System.Data.DataException("Query returned multiple results. Cannot decide which resource to test.") $errorID = 'MultipleResourcesError' $category = [System.Management.Automation.ErrorCategory]::NotSpecified $recordObject = New-Object System.Management.Automation.ErrorRecord($exception, $errorID, $category, $Cmdlet) $cmdlet.ThrowTerminatingError($recordObject) } } $result } } } |