External/powershell-scripts
1
0
Fork 0
mirror of https://github.com/admindroid-community/powershell-scripts.git synced 2025-12-17 16:35:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Export Conditional Access Policies

Browse Source 
While converting object Ids to name, error thrown for deleted objects-fixed
This commit is contained in:
AdminDroid 2024-08-09 14:49:39 +05:30
parent 71c8c409e3
commit e81c613096
1 changed files with 20 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
Export CA policies/ExportCAPolicies.ps1
View File

@ -2,7 +2,7 @@
=============================================================================================
Name: Export Conditional Access Policies to Excel using PowerShell
Description: The script exports all Conditional Access policies to an Excel file.
Version: 2.0
Version: 2.2
Website: o365reports.com
Script Highlights:
@ -98,11 +98,23 @@ Function ConvertTo-Name {
}
# Retrieve the display name for the directory object with the given ID
else{
$Name = (Get-MgBetaDirectoryObject -DirectoryObjectId $Id).AdditionalProperties["displayName"]
$DirectoryObjsHash[$Id]=$Name
}
$ConvertedNames += $Name
}
try
{
$Name = ((Get-MgBetaDirectoryObject -DirectoryObjectId $Id ).AdditionalProperties["displayName"] )
if($Name -ne $null)
{
$DirectoryObjsHash[$Id]=$Name
$ConvertedNames += $Name
}
}
catch
{
Write-Host "Deleted object configured in the CA policy $CAName" -ForegroundColor Red
Write-Host "Processing CA policies..."
}
}
}
return $ConvertedNames
}
@ -230,12 +242,12 @@ Get-MgBetaIdentityConditionalAccessPolicy -All | Foreach {
#Convert id to names for Assignment properties
if($IncludeUsers.Count -ne 0 -and ($IncludeUsers -ne 'All' -and $IncludeUsers -ne 'None' ))
{
{
$IncludeUsers=ConvertTo-Name -InputIds $IncludeUsers
}
$IncludeUsers=$IncludeUsers -join ","
if($ExcludeUsers.Count -ne 0)# -and ($ExcludeUsers -ne 'GuestsOrExternalUsers' ))
if(($ExcludeUsers.Count -ne 0) -and ($ExcludeUsers -ne 'GuestsOrExternalUsers' ))
{
$ExcludeUsers=ConvertTo-Name -InputIds $ExcludeUsers
}