mirror of
https://github.com/Gerenios/AADInternals
synced 2026-06-08 11:09:38 +00:00
Nestori
6630 lines
201 KiB
PowerShell
6630 lines
201 KiB
PowerShell
# Autogenerated Sep 23rd 2018
|
|
# Get-PartnerContracts
|
|
function Get-MSPartnerContracts
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Lists partner's customer organisations. Does not require permissions to MS Partner Center or admin rights.
|
|
|
|
.DESCRIPTION
|
|
Lists partner's customer organisations using provisioning API. Does not require permissions to MS Partner Center or admin rights.
|
|
|
|
.Parameter AccessToken
|
|
The access token used to get the list of partner's customer organisations.
|
|
|
|
.Example
|
|
PS C:\>Get-AADIntAccessTokenForAADGraph -SaveToCache
|
|
PS C:\>Get-AADIntMSPartnerContracts
|
|
|
|
CustomerName CustomerTenantId CustomerDefaultDomain ContractType
|
|
------------ ---------------- --------------------- ------------
|
|
Company dad33f16-69d1-4e32-880e-9c2d21aa3e59 company.com SupportPartnerContract
|
|
Contoso 936b7883-4746-4b89-8bc4-c8128795cd7f contoso.onmicrosoft.com ResellerPartnerContract
|
|
Adatum 17427dcd-8d61-4c23-9c68-d1f34975b420 adatum.com SupportPartnerContract
|
|
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PartnerContractSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$DomainName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ManagedTenantId,
|
|
[Parameter(Mandatory=$False)]
|
|
$SearchKey
|
|
)
|
|
Process
|
|
{
|
|
$command="ListPartnerContracts"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PartnerContractSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:ContractType i:nil="true"/>
|
|
<c:DomainName i:nil="true"/>
|
|
<c:ManagedTenantId i:nil="true"/>
|
|
<c:SearchKey>DisplayName</c:SearchKey>
|
|
</b:PartnerContractSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
if($results.Results.PartnerContract.count -lt 1)
|
|
{
|
|
$contracts = @($results.Results.PartnerContract)
|
|
}
|
|
else
|
|
{
|
|
$contracts = $results.Results.PartnerContract
|
|
}
|
|
|
|
$retVal = @()
|
|
foreach($contract in $contracts)
|
|
{
|
|
$attributes = [ordered]@{
|
|
"CustomerName" = $contract.Name
|
|
"CustomerTenantId" = $contract.TenantId
|
|
"CustomerDefaultDomain" = $contract.DefaultDomainName
|
|
"ContractType" = $contract.ContractType
|
|
#"ObjectId" = $contract.ObjectId
|
|
#"PartnerContext" = $contract.PartnerContext
|
|
}
|
|
|
|
$retVal += New-Object psobject -Property $attributes
|
|
}
|
|
|
|
return $retVal
|
|
}
|
|
}
|
|
|
|
|
|
# Set-PartnerInformation
|
|
# Oct 18th 2018
|
|
function Set-PartnerInformation
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PartnerInformation,
|
|
[ValidateSet('CompanyTenant','MicrosoftSupportTenant','SyndicatePartnerTenant','SupportPartnerTenant','ResellerPartnerTenant','ValueAddedResellerPartnerTenant')]
|
|
$CompanyType="SupportPartnerTenant",
|
|
[Parameter(Mandatory=$False)]
|
|
$Contracts,
|
|
[Parameter]
|
|
[Switch]$DapEnabled,
|
|
[Parameter(Mandatory=$True)]
|
|
$PartnerTenantId,
|
|
[Parameter(Mandatory=$False)]
|
|
$PartnerCommerceUrl,
|
|
[Parameter(Mandatory=$False)]
|
|
$PartnerCompanyName,
|
|
[Parameter(Mandatory=$False)]
|
|
$PartnerContracts,
|
|
[Parameter(Mandatory=$True)]
|
|
$PartnerHelpUrl,
|
|
[Parameter(Mandatory=$False)]
|
|
$PartnerRoleMap,
|
|
[Parameter(Mandatory=$True)]
|
|
$PartnerSupportEmail,
|
|
[Parameter(Mandatory=$True)]
|
|
$PartnerSupportTelephone,
|
|
[Parameter(Mandatory=$False)]
|
|
$PartnerSupportUrl
|
|
)
|
|
Process
|
|
{
|
|
$command="SetPartnerInformation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PartnerInformation xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
$(Add-CElement -Parameter "CompanyType" -Value $CompanyType)
|
|
<c:Contracts i:nil="true"/>
|
|
$(Add-CElement -Parameter "DapEnabled" -Value $DapEnabled)
|
|
$(Add-CElement -Parameter "ObjectId" -Value $PartnerTenantId)
|
|
$(Add-CElement -Parameter "PartnerCompanyName" -Value $PartnerCompanyName)
|
|
<c:PartnerCommerceUrl i:nil="true"/>
|
|
<c:PartnerContracts i:nil="true"/>
|
|
<c:PartnerHelpUrl i:nil="true"/>
|
|
<c:PartnerRoleMap i:nil="true"/>
|
|
<c:PartnerSupportEmails i:nil="true"/>
|
|
<c:PartnerSupportTelephones i:nil="true"/>
|
|
<c:PartnerSupportUrl i:nil="true"/>
|
|
</b:PartnerInformation>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-UserByUpn
|
|
function Remove-UserByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$RemoveFromRecycleBin=$False,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$UserPrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveUserByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RemoveFromRecycleBin>$(b2s($RemoveFromRecycleBin))</b:RemoveFromRecycleBin>
|
|
<b:UserPrincipalName>$UserPrincipalName</b:UserPrincipalName>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-AdministrativeUnit
|
|
function Remove-AdministrativeUnit
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveAdministrativeUnit"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Contact
|
|
function Get-Contact
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetContact"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-AdministrativeUnit
|
|
function Get-AdministrativeUnit
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetAdministrativeUnit"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-ServicePrincipalCredentialsByAppPrincipalId
|
|
function Get-ServicePrincipalCredentialsByAppPrincipalId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$AppPrincipalId,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ReturnKeyValues
|
|
)
|
|
Process
|
|
{
|
|
$command="ListServicePrincipalCredentialsByAppPrincipalId"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AppPrincipalId>$AppPrincipalId</b:AppPrincipalId>
|
|
<b:ReturnKeyValues i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-ServicePrincipal
|
|
function Remove-ServicePrincipal
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveServicePrincipal"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-ServicePrincipalBySpn
|
|
function Get-ServicePrincipalBySpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ServicePrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="GetServicePrincipalBySpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ServicePrincipalName>$ServicePrincipalName</b:ServicePrincipalName>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-Domain
|
|
function Remove-Domain
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveDomain"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:DomainName>$DomainName</b:DomainName>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-AdministrativeUnitResults
|
|
function Navigate-AdministrativeUnitResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateAdministrativeUnitResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-RoleMembers
|
|
function Remove-RoleMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleMembers
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveRoleMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleObjectId i:nil="true"/>
|
|
<b:RoleMembers i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Subscriptions
|
|
function Get-Subscriptions
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Gets tenant's subscriptions
|
|
|
|
.DESCRIPTION
|
|
Gets tenant's subscriptions
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Example
|
|
Get-AADIntSubscriptions
|
|
|
|
SkuPartNumber : EMSPREMIUM
|
|
WarningUnits : 0
|
|
TotalLicenses : 250
|
|
IsTrial : true
|
|
NextLifecycleDate : 2018-11-13T00:00:00Z
|
|
OcpSubscriptionId : 76909010-12ed-4b05-b3d7-ee1b42c21b4e
|
|
ConsumedUnits : 23
|
|
ObjectId : 58265dbe-24e0-4cdb-8b62-51197a4c1c13
|
|
SkuId : b05e124f-c7cc-45a0-a6aa-8cf78c946968
|
|
DateCreated : 2018-08-13T00:00:00Z
|
|
Status : Enabled
|
|
SuspendedUnits : 0
|
|
AccountName : company
|
|
|
|
SkuPartNumber : ENTERPRISEPREMIUM
|
|
WarningUnits : 25
|
|
TotalLicenses : 25
|
|
IsTrial : true
|
|
NextLifecycleDate : 2018-10-27T15:47:40Z
|
|
OcpSubscriptionId : 7c206b83-2487-49fa-b91e-3d676de02ccb
|
|
ConsumedUnits : 22
|
|
ObjectId : df58544b-5062-4d6c-85de-937f203bbe0f
|
|
SkuId : c7df2760-2c81-4ef7-b578-5b5392b571df
|
|
DateCreated : 2018-08-27T00:00:00Z
|
|
Status : Warning
|
|
SuspendedUnits : 0
|
|
AccountName : company
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReturnValue
|
|
)
|
|
Process
|
|
{
|
|
$command="ListSubscriptions"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ReturnValue i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# Get skus
|
|
$skus = Get-AccountSkus -AccessToken $AccessToken
|
|
|
|
# Loop through the results
|
|
foreach($subs in $results.Subscription)
|
|
{
|
|
|
|
$attributes=@{}
|
|
$attributes.DateCreated=$subs.DateCreated
|
|
$attributes.IsTrial=$subs.IsTrial
|
|
$attributes.NextLifecycleDate=$subs.NextLifecycleDate
|
|
$attributes.ObjectId=$subs.ObjectId
|
|
$attributes.OcpSubscriptionId=$subs.OcpSubscriptionId
|
|
#$attributes.OwnerContextId=$subs.OwnerContextId
|
|
#$attributes.OwnerObjectId=$subs.OwnerObjectId
|
|
#$attributes.OwnerType=$subs.OwnerType
|
|
$attributes.SkuId=$subs.SkuId
|
|
$attributes.SkuPartNumber=$subs.SkuPartNumber
|
|
$attributes.Status=$subs.Status
|
|
$attributes.TotalLicenses=$subs.TotalLicenses
|
|
|
|
# Get the SKU
|
|
$sku = $skus | where SkuId -eq $attributes.SkuId
|
|
$attributes.WarningUnits = $sku.WarningUnits
|
|
$attributes.ConsumedUnits = $sku.ConsumedUnits
|
|
$attributes.SuspendedUnits = $sku.SuspendedUnits
|
|
$attributes.AccountName = $sku.AccountName
|
|
|
|
# Loop through service status objects
|
|
<#
|
|
$attributes.ServiceStatus=@()
|
|
foreach($status in $subs.ServiceStatus.ServiceStatus)
|
|
{
|
|
$service_status=@{}
|
|
$service_status.ProvisioningStatus=$status.ProvisioningStatus
|
|
$service_status.ServiceName=$status.ServicePlan.ServiceName
|
|
$service_status.ServicePlanId=$status.ServicePlan.ServicePlanId
|
|
$service_status.ServiceType=$status.ServicePlan.ServiceType
|
|
$service_status.TargetClass=$status.ServicePlan.TargetClass
|
|
|
|
$attributes.ServiceStatus += New-Object psobject -Property $service_status
|
|
}
|
|
#>
|
|
# Return
|
|
New-Object psobject -Property $attributes
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-PasswordPolicy
|
|
function Set-PasswordPolicy
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$Policy,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$NotificationDays=14,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$ValidityPeriod=90
|
|
)
|
|
Process
|
|
{
|
|
$command="SetPasswordPolicy"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Policy xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:NotificationDays>$NotificationDays</c:NotificationDays>
|
|
<c:ValidityPeriod>$ValidityPeriod</c:ValidityPeriod>
|
|
</b:Policy>
|
|
<b:DomainName i:nil="$(([string]::IsNullOrEmpty($DomainName)).toString().ToLower())">$DomainName</b:DomainName>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Groups
|
|
function Get-Groups
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$AccountSku,
|
|
[ValidateSet('DistributionList','Security','MailEnabledSecurity')]
|
|
[string]$GroupType,
|
|
[Parameter(Mandatory=$False)]
|
|
$HasErrorsOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$HasLicenseErrorsOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsAgentRole,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserPrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="ListGroups"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:GroupSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:AccountSku i:nil="true"/>
|
|
<c:GroupType i:nil="true"/>
|
|
<c:HasErrorsOnly i:nil="true"/>
|
|
<c:HasLicenseErrorsOnly i:nil="true"/>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
<c:IsAgentRole i:nil="true"/>
|
|
<c:UserObjectId i:nil="true"/>
|
|
<c:UserPrincipalName i:nil="true"/>
|
|
</b:GroupSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results.Results.Group
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Subscription
|
|
function Get-Subscription
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$SubscriptionId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetSubscription"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:SubscriptionId>$SubscriptionId</b:SubscriptionId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-GroupMembers
|
|
function Remove-GroupMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupMembers,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveGroupMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:GroupMembers i:nil="true"/>
|
|
<b:GroupObjectId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-ContactResults
|
|
function Navigate-ContactResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateContactResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Domain
|
|
function Get-Domain
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="GetDomain"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:DomainName>$DomainName</b:DomainName>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-AdministrativeUnit
|
|
function Add-AdministrativeUnit
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnit,
|
|
[Parameter(Mandatory=$False)]
|
|
$Description,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisplayName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="AddAdministrativeUnit"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AdministrativeUnit xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:Description i:nil="true"/>
|
|
<c:DisplayName i:nil="true"/>
|
|
<c:ObjectId i:nil="true"/>
|
|
</b:AdministrativeUnit>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-ServicePrincipal
|
|
function Get-ServicePrincipal
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetServicePrincipal"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Get-AccountSkus
|
|
# Aug 12th 018
|
|
function Get-AccountSkus
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Gets tenant's SKUs
|
|
|
|
.DESCRIPTION
|
|
Gets tenant's stock keeping units (SKUs)
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Example
|
|
Get-AADIntAccountSkus
|
|
|
|
TargetClass : User
|
|
SkuPartNumber : EMSPREMIUM
|
|
WarningUnits : 58265dbe-24e0-4cdb-8b62-51197a4c1c13
|
|
ServiceStatus : {@{ServiceName=EXCHANGE_S_FOUNDATION; TargetClass=Tenant; ServiceType=Exchange; ServicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; ProvisioningStatus=Success}, @{ServiceName=ATA;
|
|
TargetClass=User; ServiceType=AzureAdvancedThreatAnalytics; ServicePlanId=14ab5db5-e6c4-4b20-b4bc-13e36fd2227f; ProvisioningStatus=Success}, @{ServiceName=ADALLOM_S_STANDALONE; T
|
|
argetClass=User; ServiceType=Adallom; ServicePlanId=2e2ddb96-6af9-4b1d-a3f0-d6ecfd22edb2; ProvisioningStatus=Success}, @{ServiceName=RMS_S_PREMIUM2; TargetClass=User; ServiceType=
|
|
RMSOnline; ServicePlanId=5689bec4-755d-4753-8b61-40975025187c; ProvisioningStatus=Success}...}
|
|
AccountObjectId : 1b78d686-e37b-4c01-a1ec-c963fbae482a
|
|
SuspendedUnits : 0
|
|
ConsumedUnits : 23
|
|
SkuId : b05e124f-c7cc-45a0-a6aa-8cf78c946968
|
|
ActiveUnits : 250
|
|
LockedOutUnits : 0
|
|
AccountSkuId : company:EMSPREMIUM
|
|
AccountName : company
|
|
|
|
TargetClass : User
|
|
SkuPartNumber : ENTERPRISEPREMIUM
|
|
WarningUnits : df58544b-5062-4d6c-85de-937f203bbe0f
|
|
ServiceStatus : {@{ServiceName=PAM_ENTERPRISE; TargetClass=User; ServiceType=Exchange; ServicePlanId=b1188c4c-1b36-4018-b48b-ee07604f6feb; ProvisioningStatus=Success}, @{ServiceName=BPOS_S_TODO_3
|
|
; TargetClass=User; ServiceType=To-Do; ServicePlanId=3fb82609-8c27-4f7b-bd51-30634711ee67; ProvisioningStatus=Success}, @{ServiceName=FORMS_PLAN_E5; TargetClass=User; ServiceType=
|
|
OfficeForms; ServicePlanId=e212cbc7-0961-4c40-9825-01117710dcb1; ProvisioningStatus=Success}, @{ServiceName=STREAM_O365_E5; TargetClass=User; ServiceType=MicrosoftStream; ServiceP
|
|
lanId=6c6042f5-6f01-4d67-b8c1-eb99d36eed3e; ProvisioningStatus=Success}...}
|
|
AccountObjectId : 1b78d686-e37b-4c01-a1ec-c963fbae482a
|
|
SuspendedUnits : 0
|
|
ConsumedUnits : 22
|
|
SkuId : c7df2760-2c81-4ef7-b578-5b5392b571df
|
|
ActiveUnits : 0
|
|
LockedOutUnits : 0
|
|
AccountSkuId : company:ENTERPRISEPREMIUM
|
|
AccountName : company
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AccountId
|
|
)
|
|
Process
|
|
{
|
|
$command="ListAccountSkus"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AccountId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# Loop through the results
|
|
foreach($sku in $results.AccountSkuDetails)
|
|
{
|
|
|
|
$attributes=@{}
|
|
$attributes.AccountName=$sku.AccountName
|
|
$attributes.AccountObjectId=$sku.AccountObjectId
|
|
$attributes.AccountSkuId=$sku.AccountSkuId
|
|
$attributes.ActiveUnits=$sku.ActiveUnits
|
|
$attributes.ConsumedUnits=$sku.ConsumedUnits
|
|
$attributes.LockedOutUnits=$sku.LockedOutUnits
|
|
$attributes.SkuId=$sku.SkuId
|
|
$attributes.SkuPartNumber=$sku.SkuPartNumber
|
|
$attributes.SuspendedUnits=$sku.SuspendedUnits
|
|
$attributes.TargetClass=$sku.TargetClass
|
|
$attributes.WarningUnits=$sku.WarningUnits
|
|
|
|
# FIx: There might be more than one!
|
|
$attributes.SubscriptionIds=$sku.SubscriptionIds.guid
|
|
|
|
# Loop through service status objects
|
|
$attributes.ServiceStatus=@()
|
|
foreach($status in $sku.ServiceStatus.ServiceStatus)
|
|
{
|
|
$service_status=@{}
|
|
$service_status.ProvisioningStatus=$status.ProvisioningStatus
|
|
$service_status.ServiceName=$status.ServicePlan.ServiceName
|
|
$service_status.ServicePlanId=$status.ServicePlan.ServicePlanId
|
|
$service_status.ServiceType=$status.ServicePlan.ServiceType
|
|
$service_status.TargetClass=$status.ServicePlan.TargetClass
|
|
|
|
$attributes.ServiceStatus += New-Object psobject -Property $service_status
|
|
}
|
|
|
|
# Return
|
|
New-Object psobject -Property $attributes
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-CompanyMultiNationalEnabled
|
|
function Set-CompanyMultiNationalEnabled
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$Enable=$false,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ServiceType
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanyMultiNationalEnabled"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
$(Add-BElement -Parameter "Enable" -Value $Enable)
|
|
$(Add-BElement -Parameter "ServiceType" -Value $ServiceType)
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-ServicePrincipalByAppPrincipalId
|
|
function Remove-ServicePrincipalByAppPrincipalId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AppPrincipalId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveServicePrincipalByAppPrincipalId"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AppPrincipalId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-ServicePrincipalCredentials
|
|
function Get-ServicePrincipalCredentials
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ReturnKeyValues
|
|
)
|
|
Process
|
|
{
|
|
$command="ListServicePrincipalCredentials"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:ReturnKeyValues>true</b:ReturnKeyValues>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results.ServicePrincipalCredential
|
|
}
|
|
}
|
|
|
|
|
|
# Get-AccidentalDeletionInformation
|
|
# Oct 18th 2018
|
|
function Get-AccidentalDeletionInformation
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Get accidental deletion information
|
|
|
|
.Description
|
|
Get accidental deletion information of Azure AD
|
|
|
|
.Parameter AccessToken
|
|
Access Token.
|
|
|
|
.Example
|
|
GetAADIntAccidentalDeletionInformation
|
|
|
|
AccidentalDeletionThreshold DeletionPreventionType
|
|
--------------------------- ----------------------
|
|
500 EnabledForCount
|
|
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken
|
|
)
|
|
Process
|
|
{
|
|
$command="GetAccidentalDeletionInformation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ReturnValue i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Verify-Domain
|
|
function Verify-Domain
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$FederationSettings,
|
|
[Parameter(Mandatory=$False)]
|
|
$ForceTakeover,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="VerifyDomain"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:FederationSettings i:nil="true"/>
|
|
<b:ForceTakeover i:nil="true"/>
|
|
<b:DomainName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-RolesForUser
|
|
function Get-RolesForUser
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="ListRolesForUser"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-DirSyncProvisioningErrors
|
|
function Navigate-DirSyncProvisioningErrors
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateDirSyncProvisioningErrors"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-DomainVerificationDns
|
|
function Get-DomainVerificationDns
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$Mode,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="GetDomainVerificationDns"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Mode i:nil="true"/>
|
|
<b:DomainName>$DomainName</b:DomainName>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-CompanyAllowedDataLocation
|
|
function Set-CompanyAllowedDataLocation
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ServiceType,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$IsDefault,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$InitialDomain,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$Location,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$Overwrite
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanyAllowedDataLocation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ServiceType i:nil="true"/>
|
|
<b:IsDefault i:nil="true"/>
|
|
<b:InitialDomain i:nil="true"/>
|
|
<b:Location i:nil="true"/>
|
|
<b:Overwrite i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Has-ObjectsWithDirSyncProvisioningErrors
|
|
function Has-ObjectsWithDirSyncProvisioningErrors
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ReturnValue
|
|
)
|
|
Process
|
|
{
|
|
$command="HasObjectsWithDirSyncProvisioningErrors"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ReturnValue i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-CompanyDirSyncFeature
|
|
function Set-CompanyDirSyncFeature
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[Boolean]$Enable,
|
|
[Parameter(Mandatory=$false)]
|
|
[Boolean]$DeviceWriteback,
|
|
[Parameter(Mandatory=$false)]
|
|
$DirectoryExtensions,
|
|
[Parameter(Mandatory=$false)]
|
|
$DuplicateProxyAddressResiliency,
|
|
[Parameter(Mandatory=$false)]
|
|
$DuplicateUPNResiliency,
|
|
[Parameter(Mandatory=$false)]
|
|
$EnableSoftMatchOnUpn,
|
|
[Parameter(Mandatory=$false)]
|
|
$EnforceCloudPasswordPolicyForPasswordSyncedUsers,
|
|
[Parameter(Mandatory=$false)]
|
|
$PasswordSync,
|
|
[Parameter(Mandatory=$false)]
|
|
$SynchronizeUpnForManagedUsers,
|
|
[Parameter(Mandatory=$false)]
|
|
$UnifiedGroupWriteback,
|
|
[Parameter(Mandatory=$false)]
|
|
$UserWriteback
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanyDirSyncFeature"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Enable>$Enable</b:Enable>
|
|
<b:Feature>$Feature</b:Feature>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Get-PartnerInformation
|
|
# Oct 18th 2018
|
|
function Get-PartnerInformation
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReturnValue
|
|
)
|
|
Process
|
|
{
|
|
$command="GetPartnerInformation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ReturnValue i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Get-DomainFederationSettings
|
|
function Get-DomainFederationSettings
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="GetDomainFederationSettings"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:DomainName>$DomainName</b:DomainName>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# Return
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-DirSyncProvisioningErrors
|
|
function Get-DirSyncProvisioningErrors
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$DirSyncProvisioningErrorSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$ErrorCategory,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectType,
|
|
[Parameter(Mandatory=$False)]
|
|
$PropertyName,
|
|
[Parameter(Mandatory=$False)]
|
|
$PropertyValue
|
|
)
|
|
Process
|
|
{
|
|
$command="ListDirSyncProvisioningErrors"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:DirSyncProvisioningErrorSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:ErrorCategory i:nil="true"/>
|
|
<c:ObjectType i:nil="true"/>
|
|
<c:PropertyName i:nil="true"/>
|
|
<c:PropertyValue i:nil="true"/>
|
|
</b:DirSyncProvisioningErrorSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-ServicePrincipalBySpn
|
|
function Remove-ServicePrincipalBySpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ServicePrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveServicePrincipalBySpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ServicePrincipalName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-ServicePrincipalResults
|
|
function Navigate-ServicePrincipalResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateServicePrincipalResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-AdministrativeUnitMembers
|
|
function Add-AdministrativeUnitMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitMembers,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="AddAdministrativeUnitMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AdministrativeUnitMembers i:nil="true"/>
|
|
<b:AdministrativeUnitObjectId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-RoleMembersByRoleName
|
|
function Remove-RoleMembersByRoleName
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$RoleName,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleMembers
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveRoleMembersByRoleName"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleName i:nil="true"/>
|
|
<b:RoleMembers i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-UserResults
|
|
function Navigate-UserResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateUserResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-RoleMemberResults
|
|
function Navigate-RoleMemberResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateRoleMemberResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-ServicePrincipalCredentialsBySpn
|
|
function Get-ServicePrincipalCredentialsBySpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken
|
|
)
|
|
Process
|
|
{
|
|
$command="ListServicePrincipalCredentialsBySpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-CompanyAllowedDataLocation
|
|
function Get-CompanyAllowedDataLocation
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReturnValue
|
|
)
|
|
Process
|
|
{
|
|
$command="GetCompanyAllowedDataLocation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ReturnValue i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Reset-UserPasswordByUpn
|
|
function Reset-UserPasswordByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ForceChangePasswordOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ForceChangePassword,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewPassword
|
|
)
|
|
Process
|
|
{
|
|
$command="ResetUserPasswordByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ForceChangePasswordOnly i:nil="true"/>
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
<b:ForceChangePassword i:nil="true"/>
|
|
<b:NewPassword i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Contacts
|
|
function Get-Contacts
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ContactSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$HasErrorsOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties
|
|
)
|
|
Process
|
|
{
|
|
$command="ListContacts"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ContactSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:HasErrorsOnly i:nil="true"/>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
</b:ContactSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-RoleScopedMemberResults
|
|
function Navigate-RoleScopedMemberResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateRoleScopedMemberResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Has-ObjectsWithDirSyncProvisioningErrors2
|
|
function Has-ObjectsWithDirSyncProvisioningErrors2
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ObjectType
|
|
)
|
|
Process
|
|
{
|
|
$command="HasObjectsWithDirSyncProvisioningErrors2"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectType i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-RoleScopedMembers
|
|
function Add-RoleScopedMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleMembers,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="AddRoleScopedMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleMembers i:nil="true"/>
|
|
<b:AdministrativeUnitObjectId i:nil="true"/>
|
|
<b:RoleObjectId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-UserLicensesByUpn
|
|
function Set-UserLicensesByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AddLicenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$RemoveLicenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseOptions,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="SetUserLicensesByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AddLicenses i:nil="true"/>
|
|
<b:RemoveLicenses i:nil="true"/>
|
|
<b:LicenseOptions i:nil="true"/>
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-RoleByName
|
|
function Get-RoleByName
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$RoleName
|
|
)
|
|
Process
|
|
{
|
|
$command="GetRoleByName"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Add-RoleMembers
|
|
# Oct 19th 2018
|
|
function Add-RoleMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
$RoleObjectId,
|
|
[Parameter(Mandatory=$True)]
|
|
[String]$RoleMemberObjectId,
|
|
[ValidateSet('Other','Group','User','ServicePrincipal')]
|
|
[String]$RoleMemberType="User"
|
|
)
|
|
Process
|
|
{
|
|
$command="AddRoleMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleMembers xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:RoleMember>
|
|
<c:DisplayName i:nil="true"/>
|
|
<c:EmailAddress i:nil="true"/>
|
|
<c:IsLicensed i:nil="true"/>
|
|
<c:LastDirSyncTime i:nil="true"/>
|
|
$(Add-CElement -Parameter "ObjectId" -Value $RoleMemberObjectId)
|
|
<c:OverallProvisioningStatus i:nil="true"/>
|
|
$(Add-CElement -Parameter "RoleMemberType" -Value $RoleMemberType)
|
|
<c:StrongAuthenticationRequirements i:nil="true"/>
|
|
<c:ValidationStatus i:nil="true"/>
|
|
</c:RoleMember>
|
|
</b:RoleMembers>
|
|
$(Add-BElement -Parameter "RoleObjectId" -Value $RoleObjectId)
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-User
|
|
function Set-User
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AlternateEmailAddresses,
|
|
[Parameter(Mandatory=$False)]
|
|
$AlternateMobilePhones,
|
|
[Parameter(Mandatory=$False)]
|
|
$AlternativeSecurityIds,
|
|
[Parameter(Mandatory=$False)]
|
|
$BlockCredential,
|
|
[Parameter(Mandatory=$False)]
|
|
$City,
|
|
[Parameter(Mandatory=$False)]
|
|
$CloudExchangeRecipientDisplayType,
|
|
[Parameter(Mandatory=$False)]
|
|
$Country,
|
|
[Parameter(Mandatory=$False)]
|
|
$Department,
|
|
[Parameter(Mandatory=$False)]
|
|
$DirSyncProvisioningErrors,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisplayName,
|
|
[Parameter(Mandatory=$False)]
|
|
$Errors,
|
|
[Parameter(Mandatory=$False)]
|
|
$Fax,
|
|
[Parameter(Mandatory=$False)]
|
|
$FirstName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ImmutableId,
|
|
[Parameter(Mandatory=$False)]
|
|
$IndirectLicenseErrors,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsBlackberryUser,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsLicensed,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseAssignmentDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseReconciliationNeeded,
|
|
[Parameter(Mandatory=$False)]
|
|
$Licenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$LiveId,
|
|
[Parameter(Mandatory=$False)]
|
|
$MSExchRecipientTypeDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$MSRtcSipDeploymentLocator,
|
|
[Parameter(Mandatory=$False)]
|
|
$MSRtcSipPrimaryUserAddress,
|
|
[Parameter(Mandatory=$False)]
|
|
$MobilePhone,
|
|
[Parameter(Mandatory=$False)]
|
|
$OathTokenMetadata,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$Office,
|
|
[Parameter(Mandatory=$False)]
|
|
$OverallProvisioningStatus="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$PasswordNeverExpires,
|
|
[Parameter(Mandatory=$False)]
|
|
$PasswordResetNotRequiredDuringActivate,
|
|
[Parameter(Mandatory=$False)]
|
|
$PhoneNumber,
|
|
[Parameter(Mandatory=$False)]
|
|
$PortalSettings,
|
|
[Parameter(Mandatory=$False)]
|
|
$PostalCode,
|
|
[Parameter(Mandatory=$False)]
|
|
$PreferredDataLocation,
|
|
[Parameter(Mandatory=$False)]
|
|
$PreferredLanguage,
|
|
[Parameter(Mandatory=$False)]
|
|
[String[]]$ProxyAddresses,
|
|
[ValidateSet('Other','StagedRolloutOne','StagedRolloutTwo','Compass','Dogfood')]
|
|
$ReleaseTrack,
|
|
[Parameter(Mandatory=$False)]
|
|
$ServiceInformation,
|
|
[Parameter(Mandatory=$False)]
|
|
$SignInName,
|
|
[Parameter(Mandatory=$False)]
|
|
$SoftDeletionTimestamp,
|
|
[Parameter(Mandatory=$False)]
|
|
$State,
|
|
[Parameter(Mandatory=$False)]
|
|
$StreetAddress,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationMethods,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationPhoneAppDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationProofupTime,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationRequirements,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationUserDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongPasswordRequired,
|
|
[Parameter(Mandatory=$False)]
|
|
$StsRefreshTokensValidFrom,
|
|
[Parameter(Mandatory=$False)]
|
|
$Title,
|
|
[Parameter(Mandatory=$False)]
|
|
$UsageLocation,
|
|
[ValidateSet('homepage_office365','shellmail','shellcalendar','shellpeople')]
|
|
$UserLandingPageIdentifierForO365Shell,
|
|
[Parameter(Mandatory=$True)]
|
|
$UserPrincipalName,
|
|
[ValidateSet('Super','Bricks')]
|
|
$UserThemeIdentifierForO365Shell,
|
|
[ValidateSet('Member','Guest','Viral')]
|
|
$UserType,
|
|
[ValidateSet('NotAvailable','Healthy','Error')]
|
|
$ValidationStatus="NotAvailable"
|
|
)
|
|
Process
|
|
{
|
|
$command="SetUser"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:User xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:AlternateEmailAddresses i:nil="true" xmlns:d="http://schemas.microsoft.com/2003/10/Serialization/Arrays"/>
|
|
<c:AlternateMobilePhones i:nil="true" xmlns:d="http://schemas.microsoft.com/2003/10/Serialization/Arrays"/>
|
|
<c:AlternativeSecurityIds i:nil="true"/>
|
|
$(Add-CElement -Parameter "BlockCredential" -Value "$BlockCredential")
|
|
$(Add-CElement -Parameter "City" -Value "$City")
|
|
<c:CloudExchangeRecipientDisplayType i:nil="true"/>
|
|
$(Add-CElement -Parameter "Country" -Value "$Country")
|
|
$(Add-CElement -Parameter "Department" -Value "$Department")
|
|
<c:DirSyncProvisioningErrors i:nil="true"/>
|
|
$(Add-CElement -Parameter "DisplayName" -Value "$DisplayName")
|
|
<c:Errors i:nil="true"/>
|
|
$(Add-CElement -Parameter "Fax" -Value "$Fax")
|
|
$(Add-CElement -Parameter "FirstName" -Value "$FirstName")
|
|
$(Add-CElement -Parameter "ImmutableId" -Value "$ImmutableId")
|
|
<c:IndirectLicenseErrors i:nil="true"/>
|
|
$(Add-CElement -Parameter "IsBlackberryUser" -Value "$IsBlackberryUser")
|
|
<c:IsLicensed i:nil="true"/>
|
|
<c:LastDirSyncTime i:nil="true"/>
|
|
$(Add-CElement -Parameter "LastName" -Value "$LastName")
|
|
<c:LastPasswordChangeTimestamp i:nil="true"/>
|
|
<c:LicenseAssignmentDetails i:nil="true"/>
|
|
<c:LicenseReconciliationNeeded i:nil="true"/>
|
|
<c:Licenses i:nil="true"/>
|
|
<c:LiveId i:nil="true"/>
|
|
<c:MSExchRecipientTypeDetails i:nil="true"/>
|
|
<c:MSRtcSipDeploymentLocator i:nil="true"/>
|
|
<c:MSRtcSipPrimaryUserAddress i:nil="true"/>
|
|
$(Add-CElement -Parameter "MobilePhone" -Value "$MobilePhone")
|
|
<c:ObjectId i:nil="true"/>
|
|
$(Add-CElement -Parameter "Office" -Value "$Office")
|
|
$(Add-CElement -Parameter "OverallProvisioningStatus" -Value "$OverallProvisioningStatus")
|
|
$(Add-CElement -Parameter "PasswordNeverExpires" -Value "$PasswordNeverExpires")
|
|
$(Add-CElement -Parameter "PasswordResetNotRequiredDuringActivate" -Value "$PasswordResetNotRequiredDuringActivate")
|
|
$(Add-CElement -Parameter "PhoneNumber" -Value "$PhoneNumber")
|
|
<c:PortalSettings i:nil="true"/>
|
|
$(Add-CElement -Parameter "PostalCode" -Value "$PostalCode")
|
|
<c:PreferredDataLocation i:nil="true"/>
|
|
$(Add-CElement -Parameter "PreferredLanguage" -Value "$PreferredLanguage")
|
|
<c:ProxyAddresses i:nil="true" xmlns:d="http://schemas.microsoft.com/2003/10/Serialization/Arrays"/>
|
|
$(Add-CElement -Parameter "ReleaseTrack" -Value "$ReleaseTrack")
|
|
<c:ServiceInformation i:nil="true"/>
|
|
$(Add-CElement -Parameter "SignInName" -Value "$SignInName")
|
|
<c:SoftDeletionTimestamp i:nil="true"/>
|
|
$(Add-CElement -Parameter "State" -Value "$State")
|
|
$(Add-CElement -Parameter "StreetAddress" -Value "$StreetAddress")
|
|
<c:StrongAuthenticationMethods i:nil="true"/>
|
|
<c:StrongAuthenticationPhoneAppDetails i:nil="true"/>
|
|
<c:StrongAuthenticationProofupTime i:nil="true"/>
|
|
<c:StrongAuthenticationRequirements i:nil="true"/>
|
|
<c:StrongAuthenticationUserDetails i:nil="true"/>
|
|
$(Add-CElement -Parameter "StrongPasswordRequired" -Value "$StrongPasswordRequired")
|
|
<c:StsRefreshTokensValidFrom i:nil="true"/>
|
|
$(Add-CElement -Parameter "Title" -Value "$Title")
|
|
$(Add-CElement -Parameter "UsageLocation" -Value "$UsageLocation")
|
|
$(Add-CElement -Parameter "UserLandingPageIdentifierForO365Shell" -Value "$UserLandingPageIdentifierForO365Shell")
|
|
$(Add-CElement -Parameter "UserPrincipalName" -Value "$UserPrincipalName")
|
|
$(Add-CElement -Parameter "UserThemeIdentifierForO365Shell" -Value "$UserThemeIdentifierForO365Shell")
|
|
$(Add-CElement -Parameter "UserType" -Value "$UserType")
|
|
<c:ValidationStatus i:nil="true"/>
|
|
<c:WhenCreated i:nil="true"/>
|
|
</b:User>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-AdministrativeUnitMemberResults
|
|
function Navigate-AdministrativeUnitMemberResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateAdministrativeUnitMemberResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Set-CompanySettings
|
|
# Oct 19th 2018
|
|
function Set-CompanySettings
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$AllowAdHocSubscriptions,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$AllowEmailVerifiedUsers,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DefaultUsageLocation,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$RmsViralSignUpEnabled,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$SelfServePasswordResetEnabled,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$UsersPermissionToCreateGroupsEnabled,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$UsersPermissionToCreateLOBAppsEnabled,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$UsersPermissionToReadOtherUsersEnabled,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$UsersPermissionToUserConsentToAppEnabled,
|
|
[ValidateSet('Other','StagedRolloutOne','StagedRolloutTwo','Compass','Dogfood')]
|
|
[String]$O365UserReleaseTrack
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanySettings"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Settings xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
$(Add-CElement -Parameter "AllowAdHocSubscriptions" -Value $AllowAdHocSubscriptions)
|
|
$(Add-CElement -Parameter "AllowEmailVerifiedUsers" -Value $AllowEmailVerifiedUsers)
|
|
$(Add-CElement -Parameter "DefaultUsageLocation" -Value $DefaultUsageLocation)
|
|
$(Add-CElement -Parameter "RmsViralSignUpEnabled" -Value $RmsViralSignUpEnabled)
|
|
$(Add-CElement -Parameter "SelfServePasswordResetEnabled" -Value $SelfServePasswordResetEnabled)
|
|
$(Add-CElement -Parameter "UsersPermissionToCreateGroupsEnabled" -Value $UsersPermissionToCreateGroupsEnabled)
|
|
$(Add-CElement -Parameter "UsersPermissionToCreateLOBAppsEnabled" -Value $UsersPermissionToCreateLOBAppsEnabled)
|
|
$(Add-CElement -Parameter "UsersPermissionToReadOtherUsersEnabled" -Value $UsersPermissionToReadOtherUsersEnabled)
|
|
$(Add-CElement -Parameter "UsersPermissionToUserConsentToAppEnabled" -Value $UsersPermissionToUserConsentToAppEnabled)
|
|
$(Add-CElement -Parameter "O365UserReleaseTrack" -Value $O365UserReleaseTrack)
|
|
</b:Settings>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Roles
|
|
function Get-Roles
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReturnValue
|
|
)
|
|
Process
|
|
{
|
|
$command="ListRoles"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ReturnValue i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-ServicePrincipal
|
|
function Add-ServicePrincipal
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AppPrincipalId,
|
|
[Parameter(Mandatory=$False)]
|
|
$Addresses,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$TrustedForDelegation,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$AccountEnabled,
|
|
[Parameter(Mandatory=$False)]
|
|
$ServicePrincipalNames,
|
|
[Parameter(Mandatory=$False)]
|
|
$Credentials,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DisplayName
|
|
)
|
|
Process
|
|
{
|
|
$command="AddServicePrincipal"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AppPrincipalId i:nil="true"/>
|
|
<b:Addresses i:nil="true"/>
|
|
<b:TrustedForDelegation i:nil="true"/>
|
|
<b:AccountEnabled i:nil="true"/>
|
|
<b:ServicePrincipalNames i:nil="true"/>
|
|
<b:Credentials i:nil="true"/>
|
|
<b:DisplayName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-ServicePrincipal
|
|
function Set-ServicePrincipal
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ServicePrincipal,
|
|
[Parameter(Mandatory=$False)]
|
|
$AccountEnabled,
|
|
[Parameter(Mandatory=$False)]
|
|
$Addresses,
|
|
[Parameter(Mandatory=$False)]
|
|
$AppPrincipalId,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisplayName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$ServicePrincipalNames,
|
|
[Parameter(Mandatory=$False)]
|
|
$TrustedForDelegation
|
|
)
|
|
Process
|
|
{
|
|
$command="SetServicePrincipal"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ServicePrincipal xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:AccountEnabled i:nil="true"/>
|
|
<c:Addresses i:nil="true"/>
|
|
<c:AppPrincipalId i:nil="true"/>
|
|
<c:DisplayName i:nil="true"/>
|
|
<c:ObjectId i:nil="true"/>
|
|
<c:ServicePrincipalNames i:nil="true"/>
|
|
<c:TrustedForDelegation i:nil="true"/>
|
|
</b:ServicePrincipal>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-CompanyDirSyncFeatures
|
|
function Get-CompanyDirSyncFeatures
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$Feature
|
|
)
|
|
Process
|
|
{
|
|
$command="GetCompanyDirSyncFeatures"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Feature i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results.DirSyncFeatureDetails
|
|
}
|
|
}
|
|
|
|
# Get-Users
|
|
function Get-Users
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$AccountSku,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$BlackberryUsersOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$City,
|
|
[Parameter(Mandatory=$False)]
|
|
$Country,
|
|
[Parameter(Mandatory=$False)]
|
|
$Department,
|
|
[Parameter(Mandatory=$False)]
|
|
$DomainName,
|
|
[Parameter(Mandatory=$False)]
|
|
$EnabledFilter,
|
|
[Parameter(Mandatory=$False)]
|
|
$HasErrorsOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties,
|
|
[Parameter(Mandatory=$False)]
|
|
$IndirectLicenseFilter,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseReconciliationNeededOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReturnDeletedUsers,
|
|
[Parameter(Mandatory=$False)]
|
|
$State,
|
|
[Parameter(Mandatory=$False)]
|
|
$Synchronized,
|
|
[Parameter(Mandatory=$False)]
|
|
$Title,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$UnlicensedUsersOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$UsageLocation
|
|
)
|
|
Process
|
|
{
|
|
$command="ListUsers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
$(Add-CElement -Parameter "SearchString" -Value $SearchString)
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:AccountSku i:nil="true"/>
|
|
<c:AdministrativeUnitObjectId i:nil="true"/>
|
|
<c:BlackberryUsersOnly i:nil="true"/>
|
|
<c:City i:nil="true"/>
|
|
<c:Country i:nil="true"/>
|
|
<c:Department i:nil="true"/>
|
|
<c:DomainName i:nil="true"/>
|
|
<c:EnabledFilter i:nil="true"/>
|
|
<c:HasErrorsOnly i:nil="true"/>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
<c:IndirectLicenseFilter i:nil="true"/>
|
|
<c:LicenseReconciliationNeededOnly i:nil="true"/>
|
|
<c:ReturnDeletedUsers i:nil="true"/>
|
|
<c:State i:nil="true"/>
|
|
<c:Synchronized i:nil="true"/>
|
|
<c:Title i:nil="true"/>
|
|
<c:UnlicensedUsersOnly i:nil="true"/>
|
|
<c:UsageLocation i:nil="true"/>
|
|
</b:UserSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# Return
|
|
$results.results.user
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Convert-FederatedUserToManaged
|
|
function Convert-FederatedUserToManaged
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewPassword
|
|
)
|
|
Process
|
|
{
|
|
$command="ConvertFederatedUserToManaged"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
<b:NewPassword i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Role
|
|
function Get-Role
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetRole"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Set-DomainFederationSettings
|
|
# Aug 12th 2018
|
|
function Set-DomainFederationSettings
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$DomainName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ActiveLogOnUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DefaultInteractiveAuthenticationMethod,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$FederationBrandName,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$IssuerUri,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$LogOffUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$MetadataExchangeUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NextSigningCertificate,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$OpenIdConnectDiscoveryEndpoint,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$PassiveLogOnUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PasswordChangeUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PasswordResetUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[validateset("WsFed","SAMLP")]
|
|
[string]$PreferredAuthenticationProtocol="WsFed",
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PromptLoginBehavior,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$SigningCertificate,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SigningCertificateUpdateStatus
|
|
#[Parameter(Mandatory=$False)]
|
|
#[Boolean]$SupportsMfa=$true
|
|
|
|
)
|
|
Process
|
|
{
|
|
$command="SetDomainFederationSettings"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
$(Add-BElement -Parameter "VerifiedDomain" -Value $VerifiedDomain)
|
|
$(Add-BElement -Parameter "Authentication" -Value "Federated")
|
|
$(Add-BElement -Parameter "DomainName" -Value $DomainName)
|
|
<b:FederationSettings xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
$(Add-CElement -Parameter "ActiveLogonUri" -Value $ActiveLogOnUri)
|
|
$(Add-CElement -Parameter "DefaultInteractiveAuthenticationMethod" -Value $DefaultInteractiveAuthenticationMethod)
|
|
$(Add-CElement -Parameter "FederationBrandName" -Value $FederationBrandName)
|
|
$(Add-CElement -Parameter "IssuerUri" -Value $IssuerUri)
|
|
$(Add-CElement -Parameter "LogOffUri" -Value $LogOffUri)
|
|
$(Add-CElement -Parameter "MetadataExchangeUri" -Value $MetadataExchangeUri)
|
|
$(Add-CElement -Parameter "NextSigningCertificate" -Value $NextSigningCertificate)
|
|
$(Add-CElement -Parameter "OpenIdConnectDiscoveryEndpoint" -Value $OpenIdConnectDiscoveryEndpoint)
|
|
$(Add-CElement -Parameter "PassiveLogOnUri" -Value $PassiveLogOnUri)
|
|
$(Add-CElement -Parameter "PasswordChangeUri" -Value $PasswordChangeUri)
|
|
$(Add-CElement -Parameter "PasswordResetUri" -Value $PasswordResetUri)
|
|
$(Add-CElement -Parameter "PreferredAuthenticationProtocol" -Value $PreferredAuthenticationProtocol)
|
|
$(Add-CElement -Parameter "PromptLoginBehavior" -Value $PromptLoginBehavior)
|
|
$(Add-CElement -Parameter "SigningCertificate" -Value $SigningCertificate)
|
|
$(Add-CElement -Parameter "SigningCertificateUpdateStatus" -Value $SigningCertificateUpdateStatus)
|
|
$(Add-CElement -Parameter "SupportsMfa" -Value $SupportsMfa)
|
|
</b:FederationSettings>
|
|
|
|
|
|
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-Group
|
|
function Set-Group
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$Group,
|
|
[Parameter(Mandatory=$False)]
|
|
$AssignedLicenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$CommonName,
|
|
[Parameter(Mandatory=$False)]
|
|
$Description,
|
|
[Parameter(Mandatory=$False)]
|
|
$DirSyncProvisioningErrors,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisplayName,
|
|
[Parameter(Mandatory=$False)]
|
|
$EmailAddress,
|
|
[Parameter(Mandatory=$False)]
|
|
$Errors,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupLicenseProcessingDetail,
|
|
[ValidateSet('DistributionList','Security','MailEnabledSecurity')]
|
|
$GroupType="DistributionList",
|
|
[Parameter(Mandatory=$False)]
|
|
$IsSystem,
|
|
[Parameter(Mandatory=$False)]
|
|
$LastDirSyncTime,
|
|
[Parameter(Mandatory=$False)]
|
|
$Licenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$ManagedBy,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$ProxyAddresses,
|
|
[ValidateSet('NotAvailable','Healthy','Error')]
|
|
$ValidationStatus="NotAvailable"
|
|
)
|
|
Process
|
|
{
|
|
$command="SetGroup"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Group xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:AssignedLicenses i:nil="true"/>
|
|
<c:CommonName i:nil="true"/>
|
|
<c:Description i:nil="true"/>
|
|
<c:DirSyncProvisioningErrors i:nil="true"/>
|
|
<c:DisplayName i:nil="true"/>
|
|
<c:EmailAddress i:nil="true"/>
|
|
<c:Errors i:nil="true"/>
|
|
<c:GroupLicenseProcessingDetail i:nil="true"/>
|
|
<c:GroupType i:nil="true"/>
|
|
<c:IsSystem i:nil="true"/>
|
|
<c:LastDirSyncTime i:nil="true"/>
|
|
<c:Licenses i:nil="true"/>
|
|
<c:ManagedBy i:nil="true"/>
|
|
<c:ObjectId i:nil="true"/>
|
|
<c:ProxyAddresses i:nil="true"/>
|
|
<c:ValidationStatus i:nil="true"/>
|
|
</b:Group>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Verify-Domain2
|
|
function Verify-Domain2
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$FederationSettings,
|
|
[Parameter(Mandatory=$False)]
|
|
$ForceTakeover,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="VerifyDomain2"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:FederationSettings i:nil="true"/>
|
|
<b:ForceTakeover i:nil="true"/>
|
|
<b:DomainName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-Domain
|
|
function Set-Domain
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$Domain,
|
|
[Parameter(Mandatory=$False)]
|
|
$Authentication,
|
|
[Parameter(Mandatory=$False)]
|
|
$Capabilities,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsDefault,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsInitial,
|
|
[Parameter(Mandatory=$False)]
|
|
$Name,
|
|
[Parameter(Mandatory=$False)]
|
|
$RootDomain,
|
|
[Parameter(Mandatory=$False)]
|
|
$Status,
|
|
[Parameter(Mandatory=$False)]
|
|
$VerificationMethod
|
|
)
|
|
Process
|
|
{
|
|
$command="SetDomain"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Domain xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:Authentication i:nil="true"/>
|
|
<c:Capabilities i:nil="true"/>
|
|
<c:IsDefault i:nil="true"/>
|
|
<c:IsInitial i:nil="true"/>
|
|
<c:Name i:nil="true"/>
|
|
<c:RootDomain i:nil="true"/>
|
|
<c:Status i:nil="true"/>
|
|
<c:VerificationMethod i:nil="true"/>
|
|
</b:Domain>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Retry-UserProvisioning
|
|
function Retry-UserProvisioning
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RetryUserProvisioning"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-ServicePrincipalCredentials
|
|
function Remove-ServicePrincipalCredentials
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$KeyIds,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$MsodsAsKeyStore
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveServicePrincipalCredentials"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:KeyIds i:nil="true"/>
|
|
<b:MsodsAsKeyStore i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Set-ADDirSyncEnabled
|
|
# May 8th 2019
|
|
function Set-ADSyncEnabled
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Enables or disables directory synchronization
|
|
|
|
.DESCRIPTION
|
|
Enables or disables directory synchronization using provisioning API.
|
|
|
|
Enabling / disabling the synchrnoization usually takes less than 10 seconds. Check the status using Get-AADIntCompanyInformation.
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Parameter Enabled
|
|
True or False
|
|
|
|
.Example
|
|
Set-AADIntADSyncEnabled -Enabled $true
|
|
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$EnableDirSync
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanyDirSyncEnabled"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
$(Add-BElement -Parameter "EnableDirSync" -Value $EnableDirSync)
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Change-UserPrincipalName
|
|
function Change-UserPrincipalName
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ImmutableId,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewUserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewPassword
|
|
)
|
|
Process
|
|
{
|
|
$command="ChangeUserPrincipalName"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:ImmutableId i:nil="true"/>
|
|
<b:NewUserPrincipalName i:nil="true"/>
|
|
<b:NewPassword i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
# Get-RoleMembers
|
|
# Oct 19th 2018
|
|
|
|
function Get-GlobalAdmins
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Returns Global Admins
|
|
|
|
.Description
|
|
Returns Global Admins
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Example
|
|
Get-AADIntGlobalAdmins
|
|
|
|
DisplayName UserPrincipalName
|
|
----------- -----------------
|
|
Admin admin@company.onmicrosoft.com
|
|
Admin Two admin.two@company.com
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken
|
|
)
|
|
Process
|
|
{
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Return role members using well-known Global Admins role object id.
|
|
return Get-RoleMembers -AccessToken $AccessToken -RoleObjectId "62e90394-69f5-4237-9190-012177145e10" | Select-Object @{N='DisplayName'; E={$_.DisplayName}},@{N='UserPrincipalName'; E={$_.EmailAddress}},@{N='ObjectId'; E={$_.ObjectId}}, @{N='Type'; E={$_.RoleMemberType}}
|
|
}
|
|
}
|
|
|
|
# Get-RoleMembers
|
|
# Oct 19th 2018
|
|
function Get-RoleMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties,
|
|
[Parameter(Mandatory=$False)]
|
|
$MemberObjectTypes,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="ListRoleMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleMemberSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
<c:MemberObjectTypes i:nil="true"/>
|
|
$(Add-CElement -Parameter "RoleObjectId" -Value $RoleObjectId)
|
|
</b:RoleMemberSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# Return
|
|
$results.Results.RoleMember
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-AdministrativeUnits
|
|
function Get-AdministrativeUnits
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserPrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="ListAdministrativeUnits"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AdministrativeUnitSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:IncludedProperties i:nil="true"/>
|
|
<c:UserObjectId i:nil="true"/>
|
|
<c:UserPrincipalName i:nil="true"/>
|
|
</b:AdministrativeUnitSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Reset-UserPassword
|
|
function Reset-UserPassword
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ForceChangePasswordOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ForceChangePassword,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewPassword
|
|
)
|
|
Process
|
|
{
|
|
$command="ResetUserPassword"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:ForceChangePasswordOnly i:nil="true"/>
|
|
<b:ForceChangePassword i:nil="true"/>
|
|
<b:NewPassword i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-PartnerContracts
|
|
function Navigate-PartnerContracts
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigatePartnerContracts"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-User
|
|
function Remove-UserByObjectId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$RemoveFromRecycleBin=$False
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveUser"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:RemoveFromRecycleBin>$(b2s($RemoveFromRecycleBin))</b:RemoveFromRecycleBin>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-Contact
|
|
function Remove-Contact
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveContact"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-GroupMembers
|
|
function Add-GroupMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupMembers,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="AddGroupMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:GroupMembers i:nil="true"/>
|
|
<b:GroupObjectId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-ServicePrincipalByAppPrincipalId
|
|
function Get-ServicePrincipalByAppPrincipalId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AppPrincipalId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetServicePrincipalByAppPrincipalId"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AppPrincipalId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Domains
|
|
function Get-Domains
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$SearchFilter
|
|
)
|
|
Process
|
|
{
|
|
$command="ListDomains"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:SearchFilter i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-UserByUpn
|
|
function Get-UserByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$UserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ReturnDeletedUsers=$False
|
|
)
|
|
Process
|
|
{
|
|
$command="GetUserByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserPrincipalName>$UserPrincipalName</b:UserPrincipalName>
|
|
<b:ReturnDeletedUsers>$(b2s($ReturnDeletedUsers))</b:ReturnDeletedUsers>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-CompanySecurityComplianceContactInformation
|
|
function Set-CompanySecurityComplianceContactInformation
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$SecurityComplianceNotificationPhones,
|
|
[Parameter(Mandatory=$False)]
|
|
$SecurityComplianceNotificationEmails
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanySecurityComplianceContactInformation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:SecurityComplianceNotificationPhones i:nil="true"/>
|
|
<b:SecurityComplianceNotificationEmails i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-UserByObjectID
|
|
function Get-UserByObjectId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ReturnDeletedUsers=$False
|
|
)
|
|
Process
|
|
{
|
|
$command="GetUser"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:ReturnDeletedUsers>$(b2s($ReturnDeletedUsers))</b:ReturnDeletedUsers>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
# Get individual user
|
|
function Get-User
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(ParameterSetName='ByObjectId',Mandatory=$True)]
|
|
$ObjectId,
|
|
[Parameter(ParameterSetName='ByUPN',Mandatory=$True)]
|
|
$UserPrincipalName,
|
|
[Parameter(ParameterSetName='ByLiveID',Mandatory=$True)]
|
|
$LiveID,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ReturnDeletedUsers=$False
|
|
)
|
|
Process
|
|
{
|
|
if($ObjectId -ne $null)
|
|
{
|
|
return Get-UserByObjectId -AccessToken $AccessToken -ObjectId $ObjectId -ReturnDeletedUsers $ReturnDeletedUsers
|
|
}
|
|
elseif($UserPrincipalName -ne $null)
|
|
{
|
|
return Get-UserByUpn -AccessToken $AccessToken -UserPrincipalName $UserPrincipalName -ReturnDeletedUsers $ReturnDeletedUsers
|
|
}
|
|
elseif($LiveID -ne $null)
|
|
{
|
|
return Get-UserByLiveId -AccessToken $AccessToken -LiveId $LiveID
|
|
}
|
|
}
|
|
}
|
|
|
|
# Remove user
|
|
function Remove-User
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(ParameterSetName='ByObjectId',Mandatory=$True)]
|
|
$ObjectId,
|
|
[Parameter(ParameterSetName='ByUPN',Mandatory=$True)]
|
|
$UserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$RemoveFromRecycleBin=$False
|
|
)
|
|
Process
|
|
{
|
|
if($ObjectId -ne $null)
|
|
{
|
|
return Remove-UserByObjectId -AccessToken $AccessToken -ObjectId $ObjectId -RemoveFromRecycleBin $RemoveFromRecycleBin
|
|
}
|
|
elseif($UserPrincipalName -ne $null)
|
|
{
|
|
return Remove-UserByUpn -AccessToken $AccessToken -UserPrincipalName $UserPrincipalName -RemoveFromRecycleBin $RemoveFromRecycleBin
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
# Get-ServicePrincipals
|
|
function Get-ServicePrincipals2
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ServicePrincipalSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
$SortField="DisplayName"
|
|
)
|
|
Process
|
|
{
|
|
$command="ListServicePrincipals"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ServicePrincipalSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
</b:ServicePrincipalSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# Return
|
|
$results.Results.ServicePrincipal
|
|
}
|
|
}
|
|
|
|
|
|
# Add-ForeignGroupToRole
|
|
# Oct 19th 2018
|
|
function Add-ForeignGroupToRole
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
$RoleObjectId,
|
|
[Parameter(Mandatory=$True)]
|
|
$ForeignCompanyObjectId,
|
|
[Parameter(Mandatory=$True)]
|
|
$ForeignGroupObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="AddForeignGroupToRole"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
$(Add-BElement -Parameter "RoleObjectId" -Value $RoleObjectId)
|
|
$(Add-BElement -Parameter "ForeignCompanyObjectId" -Value $ForeignCompanyObjectId)
|
|
$(Add-BElement -Parameter "ForeignGroupObjectId" -Value $ForeignGroupObjectId)
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Restore-User
|
|
function Restore-User
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewUserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$AutoReconcileProxyConflicts
|
|
)
|
|
Process
|
|
{
|
|
$command="RestoreUser"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:NewUserPrincipalName i:nil="true"/>
|
|
<b:AutoReconcileProxyConflicts i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-CompanyPasswordSyncEnabled
|
|
function Set-CompanyPasswordSyncEnabled
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$EnablePasswordSync
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanyPasswordSyncEnabled"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:EnablePasswordSync i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Restore-UserByUpn
|
|
function Restore-UserByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewUserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$AutoReconcileProxyConflicts
|
|
)
|
|
Process
|
|
{
|
|
$command="RestoreUserByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
<b:NewUserPrincipalName i:nil="true"/>
|
|
<b:AutoReconcileProxyConflicts i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Msol-Connect
|
|
function Msol-Connect
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$UpdateAvailable
|
|
)
|
|
Process
|
|
{
|
|
$command="MsolConnect"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UpdateAvailable i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-GroupMembers
|
|
function Get-GroupMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupMemberSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties,
|
|
[Parameter(Mandatory=$False)]
|
|
$MemberObjectTypes
|
|
)
|
|
Process
|
|
{
|
|
$command="ListGroupMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:GroupMemberSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:GroupObjectId i:nil="true"/>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
<c:MemberObjectTypes i:nil="true"/>
|
|
</b:GroupMemberSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-ServicePrincipalCredentialsByAppPrincipalId
|
|
function Remove-ServicePrincipalCredentialsByAppPrincipalId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$MsodsAsKeyStore,
|
|
[Parameter(Mandatory=$False)]
|
|
$AppPrincipalId,
|
|
[Parameter(Mandatory=$False)]
|
|
$KeyIds
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveServicePrincipalCredentialsByAppPrincipalId"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:MsodsAsKeyStore i:nil="true"/>
|
|
<b:AppPrincipalId i:nil="true"/>
|
|
<b:KeyIds i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-DomainAuthentication
|
|
function Set-DomainAuthentication
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
<#
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$Authentication,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName
|
|
#>
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$DomainName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ActiveLogOnUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DefaultInteractiveAuthenticationMethod,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$FederationBrandName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$IssuerUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$LogOffUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$MetadataExchangeUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NextSigningCertificate,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$OpenIdConnectDiscoveryEndpoint,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PassiveLogOnUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PasswordChangeUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PasswordResetUri,
|
|
[Parameter(Mandatory=$False)]
|
|
[validateset("WsFed","SAMLP")]
|
|
[string]$PreferredAuthenticationProtocol="WsFed",
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PromptLoginBehavior,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SigningCertificate,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SigningCertificateUpdateStatus,
|
|
[Parameter(Mandatory=$True)]
|
|
[validateset("Federated","Managed")]
|
|
[string]$Authentication,
|
|
[Parameter(Mandatory=$False)]
|
|
[boolean]$SupportsMfa=$false
|
|
)
|
|
Process
|
|
{
|
|
$command="SetDomainAuthentication"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
$(Add-BElement -Parameter "Authentication" -Value $Authentication)
|
|
$(Add-BElement -Parameter "DomainName" -Value $DomainName)
|
|
$(
|
|
|
|
if($Authentication -eq "Federated")
|
|
{
|
|
'<b:FederationSettings xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">'
|
|
$(Add-CElement -Parameter "ActiveLogonUri" -Value $ActiveLogOnUri)
|
|
$(Add-CElement -Parameter "DefaultInteractiveAuthenticationMethod" -Value $DefaultInteractiveAuthenticationMethod)
|
|
$(Add-CElement -Parameter "FederationBrandName" -Value $FederationBrandName)
|
|
$(Add-CElement -Parameter "IssuerUri" -Value $IssuerUri)
|
|
$(Add-CElement -Parameter "LogOffUri" -Value $LogOffUri)
|
|
$(Add-CElement -Parameter "MetadataExchangeUri" -Value $MetadataExchangeUri)
|
|
$(Add-CElement -Parameter "NextSigningCertificate" -Value $NextSigningCertificate)
|
|
$(Add-CElement -Parameter "OpenIdConnectDiscoveryEndpoint" -Value $OpenIdConnectDiscoveryEndpoint)
|
|
$(Add-CElement -Parameter "PassiveLogOnUri" -Value $PassiveLogOnUri)
|
|
$(Add-CElement -Parameter "PasswordChangeUri" -Value $PasswordChangeUri)
|
|
$(Add-CElement -Parameter "PasswordResetUri" -Value $PasswordResetUri)
|
|
$(Add-CElement -Parameter "PreferredAuthenticationProtocol" -Value $PreferredAuthenticationProtocol)
|
|
$(Add-CElement -Parameter "PromptLoginBehavior" -Value $PromptLoginBehavior)
|
|
$(Add-CElement -Parameter "SigningCertificate" -Value $SigningCertificate)
|
|
$(Add-CElement -Parameter "SigningCertificateUpdateStatus" -Value $SigningCertificateUpdateStatus)
|
|
$(Add-CElement -Parameter "SupportsMfa" -Value $SupportsMfa)
|
|
'</b:FederationSettings>'
|
|
}
|
|
else
|
|
{
|
|
'<b:FederationSettings i:nil="true"/>'
|
|
}
|
|
)
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-RoleScopedMembers
|
|
function Remove-RoleScopedMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleMembers,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveRoleScopedMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleMembers i:nil="true"/>
|
|
<b:AdministrativeUnitObjectId i:nil="true"/>
|
|
<b:RoleObjectId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
|
|
# Get-CompanyInformation
|
|
function Get-CompanyInformation
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Get company information
|
|
|
|
.DESCRIPTION
|
|
Get company information as XML document using Provisioning API
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.EXAMPLE
|
|
Get-AADIntCompanyInformation
|
|
|
|
AllowAdHocSubscriptions : true
|
|
AllowEmailVerifiedUsers : true
|
|
AuthorizedServiceInstances : AuthorizedServiceInstances
|
|
AuthorizedServices :
|
|
City :
|
|
CompanyDeletionStartTime :
|
|
CompanyTags : CompanyTags
|
|
CompanyType : CompanyTenant
|
|
CompassEnabled :
|
|
Country :
|
|
CountryLetterCode : US
|
|
DapEnabled :
|
|
DefaultUsageLocation :
|
|
DirSyncAnchorAttribute : mS-DS-ConsistencyGuid
|
|
DirSyncApplicationType : 1651564e-7ce4-4d99-88be-0a65050d8dc3
|
|
DirSyncClientMachineName : SERVER
|
|
DirSyncClientVersion : 1.4.38.0
|
|
DirSyncServiceAccount : Sync_SERVER1_xxxxxxxxxxx@company.onmicrosoft.com
|
|
DirectorySynchronizationEnabled : true
|
|
DirectorySynchronizationStatus : Enabled
|
|
DisplayName : Company Ltd
|
|
InitialDomain : company.onmicrosoft.com
|
|
LastDirSyncTime : 2020-08-03T15:29:34Z
|
|
LastPasswordSyncTime : 2020-08-03T15:09:07Z
|
|
MarketingNotificationEmails :
|
|
MultipleDataLocationsForServicesEnabled :
|
|
ObjectId : 527e940d-2526-483b-82a9-d5b6bf6cc165
|
|
PasswordSynchronizationEnabled : true
|
|
PortalSettings : PortalSettings
|
|
PostalCode :
|
|
PreferredLanguage : en
|
|
ReleaseTrack : FirstRelease
|
|
ReplicationScope : NA
|
|
RmsViralSignUpEnabled : true
|
|
SecurityComplianceNotificationEmails :
|
|
SecurityComplianceNotificationPhones :
|
|
SelfServePasswordResetEnabled : true
|
|
ServiceInformation : ServiceInformation
|
|
ServiceInstanceInformation : ServiceInstanceInformation
|
|
State :
|
|
Street :
|
|
SubscriptionProvisioningLimited : false
|
|
TechnicalNotificationEmails : TechnicalNotificationEmails
|
|
TelephoneNumber : 1324567890
|
|
UIExtensibilityUris :
|
|
UsersPermissionToCreateGroupsEnabled : true
|
|
UsersPermissionToCreateLOBAppsEnabled : true
|
|
UsersPermissionToReadOtherUsersEnabled : true
|
|
UsersPermissionToUserConsentToAppEnabled : true
|
|
WhenCreated : 2019-07-14T07:03:20Z
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$TenantId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetCompanyInformation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ReturnValue i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements -TenantId $TenantId)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# Return
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-ServicePrincipalCredentialsBySpn
|
|
function Add-ServicePrincipalCredentialsBySpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ServicePrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
$Credentials,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$MsodsAsKeyStore
|
|
)
|
|
Process
|
|
{
|
|
$command="AddServicePrincipalCredentialsBySpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ServicePrincipalName i:nil="true"/>
|
|
<b:Credentials i:nil="true"/>
|
|
<b:MsodsAsKeyStore i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Delete-ApplicationPassword
|
|
function Delete-ApplicationPassword
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$PasswordId,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="DeleteApplicationPassword"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PasswordId i:nil="true"/>
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Retry-GroupProvisioning
|
|
function Retry-GroupProvisioning
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RetryGroupProvisioning"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-ServicePrincipalCredentialsBySpn
|
|
function Remove-ServicePrincipalCredentialsBySpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ServicePrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
$KeyIds,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$MsodsAsKeyStore
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveServicePrincipalCredentialsBySpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ServicePrincipalName i:nil="true"/>
|
|
<b:KeyIds i:nil="true"/>
|
|
<b:MsodsAsKeyStore i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-RolesForUserByUpn
|
|
function Get-RolesForUserByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="ListRolesForUserByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Update-DirSyncProvisioningError
|
|
function Update-DirSyncProvisioningError
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="UpdateDirSyncProvisioningError"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-User
|
|
function New-User
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseOptions,
|
|
[Parameter(Mandatory=$False)]
|
|
$AlternateEmailAddresses,
|
|
[Parameter(Mandatory=$False)]
|
|
$AlternateMobilePhones,
|
|
[Parameter(Mandatory=$False)]
|
|
$AlternativeSecurityIds,
|
|
[Parameter(Mandatory=$False)]
|
|
$BlockCredential,
|
|
[Parameter(Mandatory=$False)]
|
|
$City,
|
|
[Parameter(Mandatory=$False)]
|
|
$CloudExchangeRecipientDisplayType,
|
|
[Parameter(Mandatory=$False)]
|
|
$Country,
|
|
[Parameter(Mandatory=$False)]
|
|
$Department,
|
|
[Parameter(Mandatory=$False)]
|
|
$DirSyncProvisioningErrors,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisplayName,
|
|
[Parameter(Mandatory=$False)]
|
|
$Errors,
|
|
[Parameter(Mandatory=$False)]
|
|
$Fax,
|
|
[Parameter(Mandatory=$False)]
|
|
$FirstName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ImmutableId,
|
|
[Parameter(Mandatory=$False)]
|
|
$IndirectLicenseErrors,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsBlackberryUser,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsLicensed,
|
|
[Parameter(Mandatory=$False)]
|
|
$LastDirSyncTime,
|
|
[Parameter(Mandatory=$False)]
|
|
$LastName,
|
|
[Parameter(Mandatory=$False)]
|
|
$LastPasswordChangeTimestamp,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseAssignmentDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseReconciliationNeeded,
|
|
[Parameter(Mandatory=$False)]
|
|
$Licenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$LiveId,
|
|
[Parameter(Mandatory=$False)]
|
|
$MSExchRecipientTypeDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$MSRtcSipDeploymentLocator,
|
|
[Parameter(Mandatory=$False)]
|
|
$MSRtcSipPrimaryUserAddress,
|
|
[Parameter(Mandatory=$False)]
|
|
$MobilePhone,
|
|
[Parameter(Mandatory=$False)]
|
|
$OathTokenMetadata,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$Office,
|
|
[Parameter(Mandatory=$False)]
|
|
$OverallProvisioningStatus,
|
|
[Parameter(Mandatory=$False)]
|
|
$PasswordNeverExpires,
|
|
[Parameter(Mandatory=$False)]
|
|
$PasswordResetNotRequiredDuringActivate,
|
|
[Parameter(Mandatory=$False)]
|
|
$PhoneNumber,
|
|
[Parameter(Mandatory=$False)]
|
|
$PortalSettings,
|
|
[Parameter(Mandatory=$False)]
|
|
$PostalCode,
|
|
[Parameter(Mandatory=$False)]
|
|
$PreferredDataLocation,
|
|
[Parameter(Mandatory=$False)]
|
|
$PreferredLanguage,
|
|
[Parameter(Mandatory=$False)]
|
|
$ProxyAddresses,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReleaseTrack,
|
|
[Parameter(Mandatory=$False)]
|
|
$ServiceInformation,
|
|
[Parameter(Mandatory=$False)]
|
|
$SignInName,
|
|
[Parameter(Mandatory=$False)]
|
|
$SoftDeletionTimestamp,
|
|
[Parameter(Mandatory=$False)]
|
|
$State,
|
|
[Parameter(Mandatory=$False)]
|
|
$StreetAddress,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationMethods,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationPhoneAppDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationProofupTime,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationRequirements,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongAuthenticationUserDetails,
|
|
[Parameter(Mandatory=$False)]
|
|
$StrongPasswordRequired,
|
|
[Parameter(Mandatory=$False)]
|
|
$StsRefreshTokensValidFrom,
|
|
[Parameter(Mandatory=$False)]
|
|
$Title,
|
|
[Parameter(Mandatory=$False)]
|
|
$UsageLocation,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserLandingPageIdentifierForO365Shell,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserThemeIdentifierForO365Shell,
|
|
[ValidateSet('Other','Member','Guest','Viral')]
|
|
$UserType="Other",
|
|
[ValidateSet('NotAvailable','Healthy','Error')]
|
|
$ValidationStatus="NotAvailable",
|
|
[Parameter(Mandatory=$False)]
|
|
$WhenCreated,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseAssignment,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisabledServicePlans,
|
|
[Parameter(Mandatory=$False)]
|
|
$Error,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReferencedObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$Status,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$ForceChangePassword,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$Password
|
|
)
|
|
Process
|
|
{
|
|
$command="AddUser"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ForceChangePassword i:nil="true"/>
|
|
<b:LicenseAssignment i:nil="true" xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration"/>
|
|
<b:LicenseOptions i:nil="true" xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration"/>
|
|
<b:Password i:nil="true"/>
|
|
<b:User xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:AlternateEmailAddresses i:nil="true" xmlns:d="http://schemas.microsoft.com/2003/10/Serialization/Arrays"/>
|
|
<c:AlternateMobilePhones i:nil="true" xmlns:d="http://schemas.microsoft.com/2003/10/Serialization/Arrays"/>
|
|
<c:AlternativeSecurityIds i:nil="true"/>
|
|
<c:BlockCredential i:nil="true"/>
|
|
<c:City i:nil="true"/>
|
|
<c:CloudExchangeRecipientDisplayType i:nil="true"/>
|
|
<c:Country i:nil="true"/>
|
|
<c:Department i:nil="true"/>
|
|
<c:DirSyncProvisioningErrors i:nil="true"/>
|
|
<c:DisplayName>$DisplayName</c:DisplayName>
|
|
<c:Errors i:nil="true"/>
|
|
<c:Fax i:nil="true"/>
|
|
<c:FirstName i:nil="true"/>
|
|
<c:ImmutableId i:nil="true"/>
|
|
<c:IndirectLicenseErrors i:nil="true"/>
|
|
<c:IsBlackberryUser i:nil="true"/>
|
|
<c:IsLicensed i:nil="true"/>
|
|
<c:LastDirSyncTime i:nil="true"/>
|
|
<c:LastName i:nil="true"/>
|
|
<c:LastPasswordChangeTimestamp i:nil="true"/>
|
|
<c:LicenseAssignmentDetails i:nil="true"/>
|
|
<c:LicenseReconciliationNeeded i:nil="true"/>
|
|
<c:Licenses i:nil="true"/>
|
|
<c:LiveId i:nil="true"/>
|
|
<c:MSExchRecipientTypeDetails i:nil="true"/>
|
|
<c:MSRtcSipDeploymentLocator i:nil="true"/>
|
|
<c:MSRtcSipPrimaryUserAddress i:nil="true"/>
|
|
<c:MobilePhone i:nil="true"/>
|
|
<c:ObjectId i:nil="true"/>
|
|
<c:Office i:nil="true"/>
|
|
<c:OverallProvisioningStatus>None</c:OverallProvisioningStatus>
|
|
<c:PasswordNeverExpires i:nil="true"/>
|
|
<c:PasswordResetNotRequiredDuringActivate i:nil="true"/>
|
|
<c:PhoneNumber i:nil="true"/>
|
|
<c:PortalSettings i:nil="true"/>
|
|
<c:PostalCode i:nil="true"/>
|
|
<c:PreferredDataLocation i:nil="true"/>
|
|
<c:PreferredLanguage i:nil="true"/>
|
|
<c:ProxyAddresses i:nil="true" xmlns:d="http://schemas.microsoft.com/2003/10/Serialization/Arrays"/>
|
|
<c:ReleaseTrack i:nil="true"/>
|
|
<c:ServiceInformation i:nil="true"/>
|
|
<c:SignInName i:nil="true"/>
|
|
<c:SoftDeletionTimestamp i:nil="true"/>
|
|
<c:State i:nil="true"/>
|
|
<c:StreetAddress i:nil="true"/>
|
|
<c:StrongAuthenticationMethods i:nil="true"/>
|
|
<c:StrongAuthenticationPhoneAppDetails i:nil="true"/>
|
|
<c:StrongAuthenticationProofupTime i:nil="true"/>
|
|
<c:StrongAuthenticationRequirements i:nil="true"/>
|
|
<c:StrongAuthenticationUserDetails i:nil="true"/>
|
|
<c:StrongPasswordRequired i:nil="true"/>
|
|
<c:StsRefreshTokensValidFrom i:nil="true"/>
|
|
<c:Title i:nil="true"/>
|
|
<c:UsageLocation i:nil="true"/>
|
|
<c:UserLandingPageIdentifierForO365Shell i:nil="true"/>
|
|
<c:UserPrincipalName>$UserPrincipalName</c:UserPrincipalName>
|
|
<c:UserThemeIdentifierForO365Shell i:nil="true"/>
|
|
<c:UserType i:nil="true"/>
|
|
<c:ValidationStatus i:nil="true"/>
|
|
<c:WhenCreated i:nil="true"/>
|
|
</b:User>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Change-UserPrincipalNameByUpn
|
|
function Change-UserPrincipalNameByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ImmutableId,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewUserPrincipalName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$NewPassword
|
|
)
|
|
Process
|
|
{
|
|
$command="ChangeUserPrincipalNameByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
<b:ImmutableId i:nil="true"/>
|
|
<b:NewUserPrincipalName i:nil="true"/>
|
|
<b:NewPassword i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-CompanyContactInformation
|
|
function Set-CompanyContactInformation
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$TechnicalNotificationEmails,
|
|
[Parameter(Mandatory=$False)]
|
|
$MarketingNotificationEmails
|
|
)
|
|
Process
|
|
{
|
|
$command="SetCompanyContactInformation"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:TechnicalNotificationEmails i:nil="true"/>
|
|
<b:MarketingNotificationEmails i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-AdministrativeUnit
|
|
function Set-AdministrativeUnit
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnit,
|
|
[Parameter(Mandatory=$False)]
|
|
$Description,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisplayName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="SetAdministrativeUnit"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AdministrativeUnit xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:Description i:nil="true"/>
|
|
<c:DisplayName i:nil="true"/>
|
|
<c:ObjectId i:nil="true"/>
|
|
</b:AdministrativeUnit>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-RoleMembersByRoleName
|
|
function Add-RoleMembersByRoleName
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$RoleName,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleMembers
|
|
)
|
|
Process
|
|
{
|
|
$command="AddRoleMembersByRoleName"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleName i:nil="true"/>
|
|
<b:RoleMembers i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-UserByLiveId
|
|
function Get-UserByLiveId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$True)]
|
|
[string]$LiveId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetUserByLiveId"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:LiveId>$LiveId</b:LiveId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-AdministrativeUnitMembers
|
|
function Get-AdministrativeUnitMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitMemberSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties
|
|
)
|
|
Process
|
|
{
|
|
$command="ListAdministrativeUnitMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AdministrativeUnitMemberSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:AdministrativeUnitObjectId i:nil="true"/>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
</b:AdministrativeUnitMemberSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-AdministrativeUnitMembers
|
|
function Remove-AdministrativeUnitMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitMembers,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveAdministrativeUnitMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AdministrativeUnitMembers i:nil="true"/>
|
|
<b:AdministrativeUnitObjectId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Retry-ContactProvisioning
|
|
function Retry-ContactProvisioning
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RetryContactProvisioning"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-AccidentalDeletionThreshold
|
|
function Set-AccidentalDeletionThreshold
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AccidentalDeletionThreshold
|
|
)
|
|
Process
|
|
{
|
|
$command="SetAccidentalDeletionThreshold"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AccidentalDeletionThreshold i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-ForeignGroupFromRole
|
|
function Remove-ForeignGroupFromRole
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$ForeignCompanyObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$ForeignGroupObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveForeignGroupFromRole"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleObjectId i:nil="true"/>
|
|
<b:ForeignCompanyObjectId i:nil="true"/>
|
|
<b:ForeignGroupObjectId i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Set-UserLicenses
|
|
function Set-UserLicenses
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$AddLicenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$RemoveLicenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseOptions
|
|
)
|
|
Process
|
|
{
|
|
$command="SetUserLicenses"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:AddLicenses i:nil="true"/>
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:RemoveLicenses i:nil="true"/>
|
|
<b:LicenseOptions i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-RoleScopedMembers
|
|
function Get-RoleScopedMembers
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleMemberSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties,
|
|
[Parameter(Mandatory=$False)]
|
|
$MemberObjectTypes,
|
|
[Parameter(Mandatory=$False)]
|
|
$RoleObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="ListRoleScopedMembers"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:RoleMemberSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
<c:MemberObjectTypes i:nil="true"/>
|
|
<c:RoleObjectId i:nil="true"/>
|
|
</b:RoleMemberSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Remove-Group
|
|
function Remove-Group
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="RemoveGroup"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-WellKnownGroup
|
|
function Add-WellKnownGroup
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$WellKnownGroupName
|
|
)
|
|
Process
|
|
{
|
|
$command="AddWellKnownGroup"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:WellKnownGroupName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-UsersByStrongAuthentication
|
|
function Get-UsersByStrongAuthentication
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$UserSearchDefinition,
|
|
[Parameter(Mandatory=$False)]
|
|
[int]$PageSize=500,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$SearchString,
|
|
[ValidateSet('Ascending','Descending')]
|
|
[string]$SortDirection="Ascending",
|
|
[ValidateSet('DisplayName','UserPrincipalName','None')]
|
|
[string]$SortField="None",
|
|
[Parameter(Mandatory=$False)]
|
|
$AccountSku,
|
|
[Parameter(Mandatory=$False)]
|
|
$AdministrativeUnitObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$BlackberryUsersOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$City,
|
|
[Parameter(Mandatory=$False)]
|
|
$Country,
|
|
[Parameter(Mandatory=$False)]
|
|
$Department,
|
|
[Parameter(Mandatory=$False)]
|
|
$DomainName,
|
|
[Parameter(Mandatory=$False)]
|
|
$EnabledFilter,
|
|
[Parameter(Mandatory=$False)]
|
|
$HasErrorsOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$IncludedProperties,
|
|
[Parameter(Mandatory=$False)]
|
|
$IndirectLicenseFilter,
|
|
[Parameter(Mandatory=$False)]
|
|
$LicenseReconciliationNeededOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReturnDeletedUsers,
|
|
[Parameter(Mandatory=$False)]
|
|
$State,
|
|
[Parameter(Mandatory=$False)]
|
|
$Synchronized,
|
|
[Parameter(Mandatory=$False)]
|
|
$Title,
|
|
[Parameter(Mandatory=$False)]
|
|
$UnlicensedUsersOnly,
|
|
[Parameter(Mandatory=$False)]
|
|
$UsageLocation
|
|
)
|
|
Process
|
|
{
|
|
$command="ListUsersByStrongAuthentication"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserSearchDefinition xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:PageSize>$PageSize</c:PageSize>
|
|
<c:SearchString i:nil="true"/>
|
|
<c:SortDirection>$SortDirection</c:SortDirection>
|
|
<c:SortField>$SortField</c:SortField>
|
|
<c:AccountSku i:nil="true"/>
|
|
<c:AdministrativeUnitObjectId i:nil="true"/>
|
|
<c:BlackberryUsersOnly i:nil="true"/>
|
|
<c:City i:nil="true"/>
|
|
<c:Country i:nil="true"/>
|
|
<c:Department i:nil="true"/>
|
|
<c:DomainName i:nil="true"/>
|
|
<c:EnabledFilter i:nil="true"/>
|
|
<c:HasErrorsOnly i:nil="true"/>
|
|
<c:IncludedProperties i:nil="true"/>
|
|
<c:IndirectLicenseFilter i:nil="true"/>
|
|
<c:LicenseReconciliationNeededOnly i:nil="true"/>
|
|
<c:ReturnDeletedUsers i:nil="true"/>
|
|
<c:State i:nil="true"/>
|
|
<c:Synchronized i:nil="true"/>
|
|
<c:Title i:nil="true"/>
|
|
<c:UnlicensedUsersOnly i:nil="true"/>
|
|
<c:UsageLocation i:nil="true"/>
|
|
</b:UserSearchDefinition>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-Group
|
|
function Add-Group
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$Group,
|
|
[Parameter(Mandatory=$False)]
|
|
$AssignedLicenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$CommonName,
|
|
[Parameter(Mandatory=$False)]
|
|
$Description,
|
|
[Parameter(Mandatory=$False)]
|
|
$DirSyncProvisioningErrors,
|
|
[Parameter(Mandatory=$False)]
|
|
$DisplayName,
|
|
[Parameter(Mandatory=$False)]
|
|
$EmailAddress,
|
|
[Parameter(Mandatory=$False)]
|
|
$Errors,
|
|
[Parameter(Mandatory=$False)]
|
|
$GroupLicenseProcessingDetail,
|
|
[ValidateSet('DistributionList','Security','MailEnabledSecurity')]
|
|
$GroupType="DistributionList",
|
|
[Parameter(Mandatory=$False)]
|
|
$IsSystem,
|
|
[Parameter(Mandatory=$False)]
|
|
$LastDirSyncTime,
|
|
[Parameter(Mandatory=$False)]
|
|
$Licenses,
|
|
[Parameter(Mandatory=$False)]
|
|
$ManagedBy,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$ProxyAddresses,
|
|
[ValidateSet('NotAvailable','Healthy','Error')]
|
|
$ValidationStatus="NotAvailable"
|
|
)
|
|
Process
|
|
{
|
|
$command="AddGroup"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Group xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
<c:AssignedLicenses i:nil="true"/>
|
|
<c:CommonName i:nil="true"/>
|
|
<c:Description i:nil="true"/>
|
|
<c:DirSyncProvisioningErrors i:nil="true"/>
|
|
<c:DisplayName i:nil="true"/>
|
|
<c:EmailAddress i:nil="true"/>
|
|
<c:Errors i:nil="true"/>
|
|
<c:GroupLicenseProcessingDetail i:nil="true"/>
|
|
<c:GroupType i:nil="true"/>
|
|
<c:IsSystem i:nil="true"/>
|
|
<c:LastDirSyncTime i:nil="true"/>
|
|
<c:Licenses i:nil="true"/>
|
|
<c:ManagedBy i:nil="true"/>
|
|
<c:ObjectId i:nil="true"/>
|
|
<c:ProxyAddresses i:nil="true"/>
|
|
<c:ValidationStatus i:nil="true"/>
|
|
</b:Group>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-ServicePrincipalCredentials
|
|
function Add-ServicePrincipalCredentials
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId,
|
|
[Parameter(Mandatory=$False)]
|
|
$Credentials,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$MsodsAsKeyStore
|
|
)
|
|
Process
|
|
{
|
|
$command="AddServicePrincipalCredentials"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
<b:Credentials i:nil="true"/>
|
|
<b:MsodsAsKeyStore i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-GroupResults
|
|
function Navigate-GroupResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateGroupResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Navigate-GroupMemberResults
|
|
function Navigate-GroupMemberResults
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$PageToNavigate,
|
|
[Parameter(Mandatory=$False)]
|
|
$ListContext
|
|
)
|
|
Process
|
|
{
|
|
$command="NavigateGroupMemberResults"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:PageToNavigate i:nil="true"/>
|
|
<b:ListContext i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Reset-StrongAuthenticationMethodByUpn
|
|
function Reset-StrongAuthenticationMethodByUpn
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$UserPrincipalName
|
|
)
|
|
Process
|
|
{
|
|
$command="ResetStrongAuthenticationMethodByUpn"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:UserPrincipalName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-ServicePrincipalCredentialsByAppPrincipalId
|
|
function Add-ServicePrincipalCredentialsByAppPrincipalId
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$Credentials,
|
|
[Parameter(Mandatory=$False)]
|
|
$AppPrincipalId,
|
|
[Parameter(Mandatory=$False)]
|
|
[Boolean]$MsodsAsKeyStore
|
|
)
|
|
Process
|
|
{
|
|
$command="AddServicePrincipalCredentialsByAppPrincipalId"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Credentials i:nil="true"/>
|
|
<b:AppPrincipalId i:nil="true"/>
|
|
<b:MsodsAsKeyStore i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-Group
|
|
function Get-Group
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ObjectId
|
|
)
|
|
Process
|
|
{
|
|
$command="GetGroup"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ObjectId>$ObjectId</b:ObjectId>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-PasswordPolicy
|
|
function Get-PasswordPolicy
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="GetPasswordPolicy"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:DomainName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Add-Domain
|
|
function New-Domain
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ForceTakeover,
|
|
[Parameter(Mandatory=$False)]
|
|
$Domain,
|
|
[Parameter(Mandatory=$False)]
|
|
[ValidateSet('Managed','Federated')]
|
|
$Authentication,
|
|
[Parameter(Mandatory=$False)]
|
|
$Capabilities,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsDefault,
|
|
[Parameter(Mandatory=$False)]
|
|
$IsInitial,
|
|
[Parameter(Mandatory=$False)]
|
|
$Name,
|
|
[Parameter(Mandatory=$False)]
|
|
$RootDomain,
|
|
[Parameter(Mandatory=$False)]
|
|
$Status,
|
|
[Parameter(Mandatory=$False)]
|
|
$VerificationMethod
|
|
)
|
|
Process
|
|
{
|
|
$command="AddDomain"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:Domain xmlns:c="http://schemas.datacontract.org/2004/07/Microsoft.Online.Administration">
|
|
$(Add-CElement -Parameter "Authentication" -Value $Authentication)
|
|
<c:Authentication i:nil="true"/>
|
|
<c:Capabilities i:nil="true"/>
|
|
<c:IsDefault i:nil="true"/>
|
|
<c:IsInitial i:nil="true"/>
|
|
$(Add-CElement -Parameter "Name" -Value $Name)
|
|
<c:RootDomain i:nil="true"/>
|
|
<c:Status i:nil="true"/>
|
|
<c:VerificationMethod i:nil="true"/>
|
|
</b:Domain>
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Get-HeaderInfo
|
|
function Get-HeaderInfo
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
$ClientVersionHeader,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$IdentityHeaderName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ContractVersionHeader,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$TrackingHeaderName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$HeaderNameSpace,
|
|
[Parameter(Mandatory=$False)]
|
|
$TrackingHeader,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ContractVersionHeaderName,
|
|
[Parameter(Mandatory=$False)]
|
|
$ContextHeader,
|
|
[Parameter(Mandatory=$False)]
|
|
$ReturnValue,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ClientVersionHeaderName,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$ContextHeaderName
|
|
)
|
|
Process
|
|
{
|
|
$command="GetHeaderInfo"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:ClientVersionHeader i:nil="true">
|
|
<b:IdentityHeaderName i:nil="true"/>
|
|
<b:ContractVersionHeader i:nil="true"/>
|
|
<b:TrackingHeaderName i:nil="true"/>
|
|
<b:HeaderNameSpace i:nil="true"/>
|
|
<b:TrackingHeader i:nil="true"/>
|
|
<b:ContractVersionHeaderName i:nil="true"/>
|
|
<b:ContextHeader i:nil="true"/>
|
|
<b:ReturnValue i:nil="true"/>
|
|
<b:ClientVersionHeaderName i:nil="true"/>
|
|
<b:ContextHeaderName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
|
|
# Autogenerated Sep 23rd 2018
|
|
# Verify-EmailVerifiedDomain
|
|
function Verify-EmailVerifiedDomain
|
|
{
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken,
|
|
[Parameter(Mandatory=$False)]
|
|
[string]$DomainName
|
|
)
|
|
Process
|
|
{
|
|
$command="VerifyEmailVerifiedDomain"
|
|
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Create the body for getting users
|
|
$request_elements=@"
|
|
<b:DomainName i:nil="true"/>
|
|
|
|
"@
|
|
|
|
# Create the envelope and call the API
|
|
$response=Call-ProvisioningAPI(Create-Envelope $AccessToken $command $request_elements)
|
|
|
|
# Get the results
|
|
$results = Parse-SOAPResponse($Response)
|
|
|
|
# TODO: do something with results
|
|
$results
|
|
}
|
|
}
|
|
|
|
# Gets SharePoint Service Information
|
|
function Get-SPOServiceInformation
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Get SharePoint Online service information.
|
|
|
|
.DESCRIPTION
|
|
Get SharePoint Online service information.
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Example
|
|
PS C:\>Get-AADIntSPOServiceInformation
|
|
|
|
CreatedOn : 6/26/2018 11:16:12 AM
|
|
ServiceInformation_LastChangeDate : 9/27/2018 3:48:29 PM
|
|
EnableOneDriveforSuiteUsers : False
|
|
InstanceId : 13f137d4-1920-4174-8b37-d87acec0228a
|
|
LastModifiedOn : 9/27/2018 3:52:16 PM
|
|
OfficeGraphUrl : https://company-my.sharepoint.com/_layouts/15/me.aspx
|
|
RootAdminUrl : https://company-admin.sharepoint.com/
|
|
RootIWSPOUrl : https://company-my.sharepoint.com/
|
|
SPO_LegacyPublicWebSiteEditPage : Pages/Forms/AllItems.aspx
|
|
SPO_LegacyPublicWebSitePublicUrl :
|
|
SPO_LegacyPublicWebSiteUrl :
|
|
SPO_MySiteHostUrl : https://company-my.sharepoint.com/
|
|
SPO_MySiteHost_AboutMeUrl : https://company-my.sharepoint.com/person.aspx
|
|
SPO_MySiteHost_DocumentsUrl : https://company-my.sharepoint.com/_layouts/15/MySite.aspx?MySiteRedirect=AllDocuments
|
|
SPO_MySiteHost_NewsFeedUrl : https://company-my.sharepoint.com/default.aspx
|
|
SPO_MySiteHost_ProjectSiteUrl : https://company-my.sharepoint.com/_layouts/15/MyProjects.aspx
|
|
SPO_MySiteHost_SitesUrl : https://company-my.sharepoint.com/_layouts/15/MySite.aspx?MySiteRedirect=AllSites
|
|
SPO_PublicWebSitePublicUrl :
|
|
SPO_PublicWebSiteUrl : NotSupported
|
|
SPO_RegionalRootSiteUrl : https://company.sharepoint.com/
|
|
SPO_RootSiteUrl : https://company.sharepoint.com/
|
|
SPO_TenantAdminUrl : https://company-admin.sharepoint.com/
|
|
SPO_TenantAdmin_CreateSiteCollectionUrl : https://company-admin.sharepoint.com/_layouts/15/online/CreateSiteFull.aspx
|
|
SPO_TenantAdmin_ProjectAdminUrl : https://company-admin.sharepoint.com/
|
|
SPO_TenantAdmin_ViewSiteCollectionsUrl : https://company-admin.sharepoint.com/
|
|
SPO_TenantUpgradeUrl : https://company-admin.sharepoint.com/
|
|
ShowSites_InitialVisibility : True
|
|
ShowSkyDrivePro_InitialVisibility : True
|
|
ShowYammerNewsFeed_InitialVisibility : True
|
|
VideoPortalServerRelativeUrl : /portals/hub/_layouts/15/videohome.aspx
|
|
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken
|
|
)
|
|
Process
|
|
{
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Set variables
|
|
$attributes=[ordered]@{}
|
|
|
|
# Get service information and parse SPO data
|
|
$ServiceInformation = Get-CompanyInformation -AccessToken $AccessToken
|
|
if($ServiceInformation.ServiceInformation)
|
|
{
|
|
$service_info=Parse-ServiceInformation $ServiceInformation.ServiceInformation
|
|
foreach($name in $service_info.Keys)
|
|
{
|
|
if($name.toLower().StartsWith("sharepoint"))
|
|
{
|
|
$value=$service_info[$name]
|
|
foreach($attribute in $value)
|
|
{
|
|
$attributes[$attribute.Name]=$attribute.Value
|
|
}
|
|
}
|
|
}
|
|
}
|
|
# Return
|
|
return New-Object -TypeName PSObject -Property $attributes
|
|
|
|
}
|
|
}
|
|
|
|
|
|
# Gets Office 365 service location
|
|
function Get-ServiceLocations
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Get service location information.
|
|
|
|
.DESCRIPTION
|
|
Get service location information.
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Example
|
|
PS C:\>Get-AADIntServiceLocations | Sort-Object Name | ft
|
|
|
|
Region Instance Name State Country
|
|
------ -------- ---- ----- -------
|
|
EU EUGB01 AadAllTenantsNotifications GB
|
|
NA NA003 AADPremiumService US
|
|
EU Prod03 Adallom GB
|
|
NA NA001 AzureAdvancedThreatAnalytics US
|
|
NA NA033 BDM US
|
|
NA * BecWSClients US
|
|
NA NA001 Deskless US
|
|
EU EU003 DirectoryToCosmos GB
|
|
EU EURP154-001-01 exchange IE
|
|
EU emea04-02 ExchangeOnlineProtection NL
|
|
NA NA001 Metro US
|
|
EU EMEA-1E-S2 MicrosoftCommunicationsOnline NL
|
|
NA NorthAmerica1 MicrosoftOffice US
|
|
NA NA001 MicrosoftStream US
|
|
NA NA001 MultiFactorService US
|
|
NA NA001 OfficeForms US
|
|
NA NA001 PowerAppsService US
|
|
EU EU001 PowerBI IR
|
|
NA NA001 ProcessSimple US
|
|
EU PROD_EU_Org_Ring_140 ProjectWorkManagement NL
|
|
EU EU RMSOnline NL
|
|
EU PROD_MSUB01_02 SCO IE
|
|
EU SPOS1265 SharePoint NL
|
|
NA NA002 SMIT US
|
|
NA NA001 Sway US
|
|
NA NA001 TeamspaceAPI US
|
|
NA NA001 To-Do US
|
|
NA NA003 YammerEnterprise US
|
|
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken
|
|
)
|
|
Process
|
|
{
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Get service information
|
|
$ServiceInformation = Get-CompanyInformation -AccessToken $AccessToken
|
|
|
|
# Loop through services and return a PS object
|
|
foreach($service in $ServiceInformation.ServiceInstanceInformation.ServiceInstanceInformation)
|
|
{
|
|
$attributes=@{}
|
|
$attributes["Name"] = $service.ServiceInstance.Split("/")[0]
|
|
$attributes["Instance"] = $service.ServiceInstance.Split("/")[1]
|
|
$attributes["Country"] = $service.GeographicLocation.Country
|
|
$attributes["Region"] = $service.GeographicLocation.Region
|
|
$attributes["State"] = $service.GeographicLocation.State
|
|
|
|
# Return
|
|
New-Object -TypeName PSObject -Property $attributes
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
# Gets company tags
|
|
function Get-CompanyTags
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Get company tags.
|
|
|
|
.DESCRIPTION
|
|
Get company tags, such as tenant version and update status.
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Example
|
|
PS C:\>Get-AADIntCompanyTags
|
|
|
|
azure.microsoft.com/azure=active
|
|
o365.microsoft.com/startdate=635711754831829038
|
|
o365.microsoft.com/version=15
|
|
o365.microsoft.com/signupexperience=GeminiSignUpUI
|
|
o365.microsoft.com/14to15UpgradeScheduled=True
|
|
o365.microsoft.com/14to15UpgradeCompletedDate=04-16-2013
|
|
|
|
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken
|
|
)
|
|
Process
|
|
{
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Get service information
|
|
$ServiceInformation = Get-CompanyInformation -AccessToken $AccessToken
|
|
|
|
# Return
|
|
$ServiceInformation.CompanyTags.string
|
|
}
|
|
}
|
|
|
|
# Gets service plans
|
|
function Get-ServicePlans
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Get service plans.
|
|
|
|
.DESCRIPTION
|
|
Get service plans assigned to tenant.
|
|
|
|
.Parameter AccessToken
|
|
Access Token
|
|
|
|
.Example
|
|
PS C:\>Get-AADServicePlans | ft
|
|
|
|
SKU ServicePlanId ServiceName ServiceType AssignedTimestamp CapabilityStatus ProvisioningStatus
|
|
--- ------------- ----------- ----------- ----------------- ---------------- ------------------
|
|
ENTERPRISEPREMIUM b1188c4c-1b36-4018-b48b-ee07604f6feb PAM_ENTERPRISE Exchange 2018-09-27T15:47:45Z Enabled Success
|
|
76846ad7-7776-4c40-a281-a386362dd1b9 ProcessSimple 2018-09-27T15:47:25Z Deleted
|
|
c87f142c-d1e9-4363-8630-aaea9c4d9ae5 To-Do 2018-09-27T15:47:24Z Deleted
|
|
c68f8d98-5534-41c8-bf36-22fa496fa792 PowerAppsService 2018-09-27T15:47:25Z Deleted
|
|
9e700747-8b1d-45e5-ab8d-ef187ceec156 MicrosoftStream 2018-09-27T15:47:25Z Deleted
|
|
2789c901-c14e-48ab-a76a-be334d9d793a OfficeForms 2018-09-27T15:47:25Z Deleted
|
|
ENTERPRISEPREMIUM 9f431833-0334-42de-a7dc-70aa40db46db LOCKBOX_ENTERPRISE Exchange 2018-08-27T05:46:50Z Enabled Success
|
|
ENTERPRISEPREMIUM 3fb82609-8c27-4f7b-bd51-30634711ee67 BPOS_S_TODO_3 To-Do 2018-08-27T05:46:50Z Enabled Success
|
|
ENTERPRISEPREMIUM 7547a3fe-08ee-4ccb-b430-5077c5041653 YAMMER_ENTERPRISE YammerEnterprise 2018-08-27T05:46:51Z Enabled Success
|
|
|
|
|
|
#>
|
|
[cmdletbinding()]
|
|
Param(
|
|
[Parameter(Mandatory=$False)]
|
|
[String]$AccessToken
|
|
)
|
|
Process
|
|
{
|
|
# Get from cache if not provided
|
|
$AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "1b730954-1685-4b74-9bfd-dac224a7b894" -Resource "https://graph.windows.net"
|
|
|
|
# Get service information
|
|
$TenantInformation = Get-TenantDetails -AccessToken $AccessToken
|
|
|
|
# Get SKUs
|
|
$skus = Get-AccountSkus -AccessToken $AccessToken
|
|
|
|
foreach($plan in $TenantInformation.assignedPlans)
|
|
{
|
|
$attributes = @{}
|
|
$attributes.AssignedTimestamp = $plan.assignedTimestamp
|
|
$attributes.CapabilityStatus = $plan.capabilityStatus
|
|
$attributes.ServicePlanId = $plan.servicePlanId
|
|
|
|
# Get info from sku
|
|
$skuInfo = Get-SkuAndServiceName -SKUs $skus -ServicePlanId $plan.servicePlanId
|
|
$attributes.SKU = $skuInfo.SkuName
|
|
$attributes.ServiceType = $skuInfo.ServiceType
|
|
$attributes.ServiceName = $skuInfo.ServiceName
|
|
$attributes.ProvisioningStatus = $skuInfo.ProvisioningStatus
|
|
|
|
# If or not attached to any sku or if deleted, no info in SKU
|
|
if([string]::IsNullOrEmpty($attributes.ServiceType))
|
|
{
|
|
$attributes.ServiceType = $plan.service
|
|
}
|
|
|
|
New-Object psobject -Property $attributes
|
|
|
|
}
|
|
}
|
|
} |