functions/agreements/Invoke-TmfAgreement.ps1
|
function Invoke-TmfAgreement { <# .SYNOPSIS Performs the required actions for a resource type against the connected Tenant. #> [CmdletBinding()] Param ( [string[]] $SpecificResources, [string[]] $SourceFile, [string[]] $SourceConfig, [switch] $Confirm = $false, [System.Management.Automation.PSCmdlet] $Cmdlet = $PSCmdlet ) begin { $resourceName = "agreements" if (!$script:desiredConfiguration[$resourceName]) { Stop-PSFFunction -String "TMF.NoDefinitions" -StringValues "Agreement" return } Test-GraphConnection -Cmdlet $Cmdlet $tenant = (Invoke-MgGraphRequest -Method GET -Uri ("$script:graphBaseUrl1/organization?`$select=displayname,id")).value if (($SpecificResources -and $SourceFile -and $SourceConfig) -or ($SpecificResources -and $SourceFile) -or ($SourceFile -and $SourceConfig)) { $exception = New-Object System.Data.DataException("Multiple filters are not supported. You can only filter by one type, sourceFile or sourceConfig or specificResources!") $errorID = "MultipleFiltersNotSupported" $category = [System.Management.Automation.ErrorCategory]::NotSpecified $recordObject = New-Object System.Management.Automation.ErrorRecord($exception, $errorID, $category, $Cmdlet) $cmdlet.ThrowTerminatingError($recordObject) } } process { if (Test-PSFFunctionInterrupt) { return } if (-not $Confirm) { Write-PSFMessage -Level Host -FunctionName "Invoke-TmfAgreement" -String "TMF.TenantInformation" -StringValues $tenant.displayName, $tenant.Id if ((Read-Host "Is this the correct tenant? [y/n]") -notin @("y","Y")) { Write-PSFMessage -Level Error -String "TMF.UserCanceled" throw "Connected to the wrong tenant." } if ($SpecificResources) { Write-PSFMessage -Level Host -FunctionName "Invoke-TmfAgreement" -String "TMF.Invoke.Confirmed" -StringValues "agreement configuration for resources: $($SpecificResources -join ",")" $testResults = Test-TmfAgreement -SpecificResources $SpecificResources -RawOutput -Cmdlet $Cmdlet } elseif ($SourceFile) { Write-PSFMessage -Level Host -FunctionName "Invoke-TmfAgreement" -String "TMF.Invoke.Confirmed" -StringValues "agreement configuration for SourceFile(s): $($SourceFile -join ",")" $testResults = Test-TmfAgreement -SourceFile $SourceFile -RawOutput -Cmdlet $Cmdlet } elseif ($SourceConfig) { Write-PSFMessage -Level Host -FunctionName "Invoke-TmfAgreement" -String "TMF.Invoke.Confirmed" -StringValues "agreement configuration for SourceConfig(s): $($SourceConfig -join ",")" $testResults = Test-TmfAgreement -SourceConfig $SourceConfig -RawOutput -Cmdlet $Cmdlet } else { Write-PSFMessage -Level Host -FunctionName "Invoke-TmfAgreement" -String "TMF.Invoke.Confirmed" -StringValues "all agreement configurations" $testResults = Test-TmfAgreement -RawOutput -Cmdlet $Cmdlet } } else { if ($SpecificResources) { $testResults = Test-TmfAgreement -SpecificResources $SpecificResources -RawOutput -Cmdlet $Cmdlet } elseif ($SourceFile) { $testResults = Test-TmfAgreement -SourceFile $SourceFile -RawOutput -Cmdlet $Cmdlet } elseif ($SourceConfig) { $testResults = Test-TmfAgreement -SourceConfig $SourceConfig -RawOutput -Cmdlet $Cmdlet } else { $testResults = Test-TmfAgreement -RawOutput -Cmdlet $Cmdlet } } foreach ($result in $testResults) { Beautify-TmfTestResult -TestResult $result -FunctionName $MyInvocation.MyCommand switch ($result.ActionType) { "Create" { $requestUrl = "$script:graphBaseUrl1/identityGovernance/termsOfUse/agreements" $requestMethod = "POST" $requestBody = @{ "displayName" = $result.DesiredConfiguration.displayName } try { "isViewingBeforeAcceptanceRequired", "isPerDeviceAcceptanceRequired", "userReacceptRequiredFrequency", "termsExpiration", "files" | ForEach-Object { if ($result.DesiredConfiguration.Properties() -contains "$_") { switch ($_) { "files" { #Add default file $configPath = (Get-TmfActiveConfiguration | Where-Object {$_.Name -eq $result.DesiredConfiguration.sourceConfig}).Path $requestBody["files"] = @($result.DesiredConfiguration.files | Where-Object {$_.isDefault -eq $true} | ForEach-Object { $file = $_ | Select-Object fileName, language, isDefault $filePath = "{0}/agreements/{1}" -f $configPath, $_.filePath $data = [Convert]::ToBase64String([System.IO.File]::ReadAllBytes($filePath)) Add-Member -InputObject $file -MemberType NoteProperty -Name "fileData" -Value @{ data = $data } Add-Member -InputObject $file -MemberType NoteProperty -Name "displayName" -Value $result.DesiredConfiguration.displayName return $file }) } default { $requestBody[$_] = $result.DesiredConfiguration.$_ } } } } $requestBody = $requestBody | ConvertTo-Json -ErrorAction Stop -Depth 8 Write-PSFMessage -Level Verbose -String "TMF.Invoke.SendingRequestWithBody" -StringValues $requestMethod, $requestUrl, $requestBody Invoke-MgGraphRequest -Method $requestMethod -Uri $requestUrl -Body $requestBody | Out-Null #Add additional localization files if ($result.DesiredConfiguration.files.count -gt 1) { #Get agreementId for ($i=0; $i -lt 5; $i++) { $agreementId = (Invoke-MgGraphRequest -Method GET -Uri "$($requestUrl)?`$filter=displayName eq '$($result.DesiredConfiguration.displayName)'").value.id if ($agreementId) { Start-Sleep 5 break } else { Start-Sleep 5 } } foreach ($additionalFile in ($result.DesiredConfiguration.files | Where-Object {$_.isDefault -eq $false})) { $fileRequestBody = @($result.DesiredConfiguration.files | Where-Object {$_.fileName -eq $additionalFile.fileName} | ForEach-Object { $file = $_ | Select-Object fileName, language, isDefault $filePath = "{0}/agreements/{1}" -f $configPath, $_.filePath $data = [Convert]::ToBase64String([System.IO.File]::ReadAllBytes($filePath)) Add-Member -InputObject $file -MemberType NoteProperty -Name "fileData" -Value @{ data = $data } Add-Member -InputObject $file -MemberType NoteProperty -Name "displayName" -Value $result.DesiredConfiguration.displayName return $file }) | ConvertTo-Json -Depth 5 Write-PSFMessage -Level Verbose -String "TMF.Invoke.SendingRequestWithBody" -StringValues "POST", "$($requestUrl)/$($agreementId)/files", $fileRequestBody Invoke-MgGraphRequest -Method POST -Uri "$($requestUrl)/$($agreementId)/files" -Body $fileRequestBody -ContentType "application/json" | Out-Null } } } catch { Write-PSFMessage -Level Error -String "TMF.Invoke.ActionFailed" -StringValues $result.Tenant, $result.ResourceType, $result.ResourceName, $result.ActionType throw $_ } } "Delete" { $requestUrl = "$script:graphBaseUrl1/identityGovernance/termsOfUse/agreements/{0}" -f $result.GraphResource.Id $requestMethod = "DELETE" try { Write-PSFMessage -Level Verbose -String "TMF.Invoke.SendingRequest" -StringValues $requestMethod, $requestUrl Invoke-MgGraphRequest -Method $requestMethod -Uri $requestUrl } catch { Write-PSFMessage -Level Error -String "TMF.Invoke.ActionFailed" -StringValues $result.Tenant, $result.ResourceType, $result.ResourceName, $result.ActionType throw $_ } } "Update" { $requestUrl = "$script:graphBaseUrl1/identityGovernance/termsOfUse/agreements/{0}" -f $result.GraphResource.Id $requestMethod = "PATCH" $requestBody = @{} try { foreach ($change in $result.Changes) { switch ($change.Property) { "files" { $configPath = (Get-TmfActiveConfiguration | Where-Object {$_.Name -eq $result.DesiredConfiguration.sourceConfig}).Path $changedFiles = @() $changedFiles += for ($i=0; $i -lt $change.Actions.count;$i++) {$change.Actions[$i]["Set"]} foreach ($changedFile in $changedFiles) { $fileRequestBody = @($result.DesiredConfiguration.files | Where-Object {$_.fileName -eq $changedFile} | ForEach-Object { $file = $_ | Select-Object fileName, language, isDefault $filePath = "{0}/agreements/{1}" -f $configPath, $_.filePath $data = [Convert]::ToBase64String([System.IO.File]::ReadAllBytes($filePath)) Add-Member -InputObject $file -MemberType NoteProperty -Name "fileData" -Value @{ data = $data } Add-Member -InputObject $file -MemberType NoteProperty -Name "displayName" -Value $result.DesiredConfiguration.displayName return $file }) | ConvertTo-Json -Depth 5 Write-PSFMessage -Level Verbose -String "TMF.Invoke.SendingRequestWithBody" -StringValues "POST", "$requestUrl/files", $fileRequestBody Invoke-MgGraphRequest -Method POST -Uri "$requestUrl/files" -Body $fileRequestBody -ContentType "application/json" | Out-Null } } default { foreach ($action in $change.Actions.Keys) { switch ($action) { "Set" { $requestBody[$change.Property] = $change.Actions[$action] } } } } } } if ($requestBody.Keys -gt 0) { $requestBody = $requestBody | ConvertTo-Json -ErrorAction Stop Write-PSFMessage -Level Verbose -String "TMF.Invoke.SendingRequestWithBody" -StringValues $requestMethod, $requestUrl, $requestBody Invoke-MgGraphRequest -Method $requestMethod -Uri $requestUrl -Body $requestBody } } catch { Write-PSFMessage -Level Error -String "TMF.Invoke.ActionFailed" -StringValues $result.Tenant, $result.ResourceType, $result.ResourceName, $result.ActionType throw $_ } } "NoActionRequired" { } default { Write-PSFMessage -Level Warning -String "TMF.Invoke.ActionTypeUnknown" -StringValues $result.ActionType } } Write-PSFMessage -Level Host -String "TMF.Invoke.ActionCompleted" -StringValues $result.Tenant, $result.ResourceType, $result.ResourceName, (Get-ActionColor -Action $result.ActionType), $result.ActionType } } end { Load-TmfConfiguration -Cmdlet $Cmdlet } } |