AADRoleEligibilityScheduleRequest - ENHANCEMENT - DirectoryScopeID requires Object GUID

[pangjaa]

Description of the issue

Currently, AADRoleEligibilityScheduleRequest allows PIM Role assignments to be scoped to a Directory Object. DirectoryScopeId = "/<guid>"; The method used to define the role scope requires that the object in question is defined prior to assignment. This is not ideal as it requires the configuration to be applied twice (once for resource provisioning, and the second for role assignment), and this makes the configuration specific to a tenant.

Recommended modifying DirectoryScopeId to accept an object in addition to a string.

@{
     ScopeType = [STRING] # allowable @('Application', 'Device', 'Group', 'Service Principal', 'User')
     Scope = [LIST] @('AppName','AppName2',...)
}

Microsoft 365 DSC Version

1.24.1113.1

Which workloads are affected

Azure Active Directory (Entra ID)

The DSC configuration

AADRoleEligibilityScheduleRequest 'assignment' {
    DependsOn             = @(
        '[AADRoleDefinition]AADRoleDefinition-CustomeRole'
        '[AADGroup]sg-test'
    )
    Principal             = 'sg-test'  assignment
    RoleDefinition        = '[Custom Role]' 
    PrincipalType         = 'Group' 
    DirectoryScopeId      = "/<guid>"; 
    # Id
    # AppScopeId
    Action                = 'AdminAssign' request.
    # IsValidationOnly
    Justification         = 'Assigning permanent eligibility for Entra ID operators team' 
    IsValidationOnly      = $false
    ScheduleInfo          = MSFT_AADRoleEligibilityScheduleRequestSchedule {
        startDateTime = '2023-09-01T02:40:44Z'
        expiration    = MSFT_AADRoleEligibilityScheduleRequestScheduleExpiration {
            type = 'noExpiration'
        }
    }
    # TicketInfo
    Ensure                = 'Present'
    ApplicationId         = $ApplicationId
    TenantId              = $TenantId
    CertificateThumbprint = $Thumbprint
}

Verbose logs showing the problem

Environment Information + PowerShell Version

OsName               : Microsoft Windows Server 2022 Datacenter
OsOperatingSystemSKU : DatacenterServerEdition
OsArchitecture       : 64-bit
WindowsVersion       : 2009
WindowsBuildLabEx    : 20348.1.amd64fre.fe_release.210507-1500
OsLanguage           : en-US
OsMuiLanguages       : {en-US}