Skip to content

Commit

Permalink
Merge pull request #2874 from ykuijs/Dev
Browse files Browse the repository at this point in the history
Fixed #2866, #2889 and #2890
  • Loading branch information
ykuijs authored Feb 13, 2023
2 parents c7365e0 + bf36b3d commit 056f286
Show file tree
Hide file tree
Showing 38 changed files with 695 additions and 304 deletions.
9 changes: 9 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,17 @@

# UNRELEASED

* EXOIRMConfiguration
* Fixed issue where the export did not the correct type for RMSOnlineKeySharingLocation
FIXES [#2890](https://github.com/microsoft/Microsoft365DSC/issues/2890)
* IntuneRoleAssignment
* Fixed issue where the export did not the correct type for ScopeType
FIXES [#2889](https://github.com/microsoft/Microsoft365DSC/issues/2889)
* O365OrgSettings
* Initial Release.
* MISC
* Updated required permissions of several resources
FIXES [#2866](https://github.com/microsoft/Microsoft365DSC/issues/2866)

# 1.23.208.1

Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
{
"resourceName": "AADAdministrativeUnit",
"description": "This resource configures an Azure Active Directory administrative unit.",
"permissions": {
Expand All @@ -8,25 +8,31 @@
{
"name": "AdministrativeUnit.Read.All"
},
{
"name": "Directory.Read.All"
},
{
"name": "RoleManagement.Read.Directory"
},
{
"name": "Member.Read.Hidden"
}
],
"update": [
{
"name": "AdministrativeUnit.Read.All"
},
{
"name": "AdministrativeUnit.ReadWrite.All"
},
{
"name": "Directory.ReadWrite.All"
"name": "Application.Read.All"
},
{
"name": "Device.Read.All"
},
{
"name": "Group.Read.All"
},
{
"name": "RoleManagement.Read.Directory"
},
{
"name": "RoleManagement.ReadWrite.Directory"
"name": "User.Read.All"
}
]
},
Expand All @@ -35,25 +41,31 @@
{
"name": "AdministrativeUnit.Read.All"
},
{
"name": "Directory.Read.All"
},
{
"name": "RoleManagement.Read.Directory"
},
{
"name": "Member.Read.Hidden"
}
],
"update": [
{
"name": "AdministrativeUnit.Read.All"
},
{
"name": "AdministrativeUnit.ReadWrite.All"
},
{
"name": "Directory.ReadWrite.All"
"name": "Application.Read.All"
},
{
"name": "Device.Read.All"
},
{
"name": "Group.Read.All"
},
{
"name": "RoleManagement.Read.Directory"
},
{
"name": "RoleManagement.ReadWrite.Directory"
"name": "User.Read.All"
}
]
}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,9 @@
},
{
"name": "Application.ReadWrite.All"
},
{
"name": "User.Read.All"
}
]
},
Expand All @@ -30,6 +33,9 @@
},
{
"name": "Application.ReadWrite.All"
},
{
"name": "User.Read.All"
}
]
}
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
{
"resourceName": "AADAuthorizationPolicy",
"description": "This resource configures the Azure Active Directory Authorization Policy.",
"permissions": {
Expand All @@ -11,7 +11,7 @@
],
"update": [
{
"name": "Policy.ReadWrite.Authorization"
"name": "Policy.ReadWrite.All"
}
]
},
Expand All @@ -23,7 +23,7 @@
],
"update": [
{
"name": "Policy.ReadWrite.Authorization"
"name": "Policy.ReadWrite.All"
}
]
}
Expand Down
Original file line number Diff line number Diff line change
@@ -1,39 +1,38 @@
{
{
"resourceName": "AADEntitlementManagementAccessPackage",
"description": "This resource configures an A A D Entitlement Management Access Package.",
"permissions": {
"graph": {
"delegated": {
"read": [
{
"name": "EntitlementManagement.Read.All"
},
{
"name": "EntitlementManagement.ReadWrite.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
},
"application": {
"read": [
{
"name": "EntitlementManagement.Read.All"
},
{
"name": "EntitlementManagement.ReadWrite.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
}
}
}

"permissions": {
"graph": {
"delegated": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.Read.All"
},
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
},
"application": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.Read.All"
},
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
}
}
}
}
Original file line number Diff line number Diff line change
@@ -1,29 +1,32 @@
{
{
"resourceName": "AADEntitlementManagementAccessPackageCatalog",
"description": "This resource configures an Azure AD Entitlement Management Access Package Catalog.",
"permissions": {
"graph": {
"delegated": {
"read": [

],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
},
"application": {
"read": [

],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
}
}
}

"permissions": {
"graph": {
"delegated": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
},
"application": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
}
}
}
}
Original file line number Diff line number Diff line change
@@ -1,33 +1,32 @@
{
{
"resourceName": "AADEntitlementManagementAccessPackageCatalogResource",
"description": "This resource configures an Azure AD Entitlement Management Access Package Catalog Resource.",
"permissions": {
"graph": {
"delegated": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
},
"application": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
}
}
}

"permissions": {
"graph": {
"delegated": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
},
"application": {
"read": [
{
"name": "EntitlementManagement.Read.All"
}
],
"update": [
{
"name": "EntitlementManagement.ReadWrite.All"
}
]
}
}
}
}
30 changes: 30 additions & 0 deletions Modules/Microsoft365DSC/DSCResources/MSFT_AADGroup/settings.json
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,23 @@
}
],
"update": [
{
"name": "Group.Read.All"
},
{
"name": "Group.ReadWrite.All"
},
{
"name": "Organization.Read.All"
},
{
"name": "RoleManagement.Read.Directory"
},
{
"name": "RoleManagement.ReadWrite.Directory"
},
{
"name": "User.Read.All"
}
]
},
Expand All @@ -22,8 +37,23 @@
}
],
"update": [
{
"name": "Group.Read.All"
},
{
"name": "Group.ReadWrite.All"
},
{
"name": "Organization.Read.All"
},
{
"name": "RoleManagement.Read.Directory"
},
{
"name": "RoleManagement.ReadWrite.Directory"
},
{
"name": "User.Read.All"
}
]
}
Expand Down
Loading

0 comments on commit 056f286

Please sign in to comment.