ZeroTrustAssessmentV2

0.6.0

private/tests/Test-Assessment.21810.ps1

                                <#

.SYNOPSIS

#>

function Test-Assessment-21810 {

    [CmdletBinding()]

    param()

    Write-PSFMessage '🟦 Start' -Tag Test -Level VeryVerbose

    $activity = "Checking Resource-Specific Consent is restricted"

    Write-ZtProgress -Activity $activity -Status "Getting resource-specific consent status"

    $result = Get-MgBetaTeamRscConfiguration

    $testResultMarkdown = ""

    if ($result.State -eq 'EnabledForPreApprovedAppsOnly' -or $result.State -eq 'DisabledForAllApps') {

        $passed = $true

        $testResultMarkdown += "Resource-Specific Consent is restricted.`n`n%TestResult%"

    }

    else {

        $passed = $false

        $testResultMarkdown += "Resource-Specific Consent is not restricted.`n`n%TestResult%"

    }

    $mdInfo = "The current state is {0}.`n" -f $result.State

    # Replace the placeholder with the detailed information

    $testResultMarkdown = $testResultMarkdown -replace "%TestResult%", $mdInfo

    $params = @{

        TestId             = '21810'

        Title              = "Resource-Specific Consent is restricted"

        UserImpact         = 'Medium'

        Risk               = 'Medium'

        ImplementationCost = 'Medium'

        AppliesTo          = 'Identity'

        Tag                = 'Identity'

        Status             = $passed

        Result             = $testResultMarkdown

    }

    Add-ZtTestResultDetail @params

}