Merge pull request #3409 from NikCharlebois/Fix-#3292

FIXES #3292
microsoft · Jun 22, 2023 · 5164afc · 5164afc
2 parents 7757234 + 96d1f18
commit 5164afc
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 4 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -20,6 +20,8 @@
 * MISC
   * Fixes the display of arrays as property values for Excel based reports from New-M365DSCReportFromConfiguration.
     FIXES [#3173](https://github.com/microsoft/Microsoft365DSC/issues/3173)
+  * Added the Organization.Read.All permission by default in the Get-M365DSCCompiledPermisisonList cmdlet return values.
+    FIXES [#3292](https://github.com/microsoft/Microsoft365DSC/issues/3292)
 * DEPENDENCIES
   * Updated MicrosoftTeams to version 5.3.0.
   * Updated MSCloudLoginAssistant to version 1.0.114.

diff --git a/Modules/Microsoft365DSC/DSCResources/MSFT_AADConditionalAccessPolicy/settings.json b/Modules/Microsoft365DSC/DSCResources/MSFT_AADConditionalAccessPolicy/settings.json
@@ -45,12 +45,12 @@
             "application": {
                 "read": [
                     {
-                        "name": "NotSupported"
+                        "name": "Policy.Read.All"
                     }
                 ],
                 "update": [
                     {
-                        "name": "NotSupported"
+                        "name": "Policy.ReadWrite.ConditionalAccess"
                     }
                 ]
             }

diff --git a/Modules/Microsoft365DSC/Modules/M365DSCPermissions.psm1 b/Modules/Microsoft365DSC/Modules/M365DSCPermissions.psm1
@@ -63,8 +63,22 @@ function Get-M365DSCCompiledPermissionList
     }
 
     $results = @{
-        Read               = @()
-        Update             = @()
+        Read               = @(
+            @{
+                Permission = @{
+                    Name = "Organization.Read.All"
+                    Type = "Application"
+                }
+            }
+        )
+        Update             = @(
+            @{
+                Permission = @{
+                    Name = "Organization.Read.All"
+                    Type = "Application"
+                }
+            }
+        )
         RequiredRoles      = @()
         RequiredRoleGroups = @()
     }