Add synopsis

KelvinTegelaar · KelvinTegelaar · commit 1c1bba8b2aea · 2026-01-02T22:58:37.000+01:00
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21812.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21812.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21812 {
+    <#
+    .SYNOPSIS
+    Maximum number of Global Administrators doesn't exceed five users
+    #>
     [CmdletBinding()]
     param (
         [Parameter(Mandatory = $true)]
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21813.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21813.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21813 {
+    <#
+    .SYNOPSIS
+    High Global Administrator to privileged user ratio
+    #>
     [CmdletBinding()]
     param (
         [Parameter(Mandatory = $true)]
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21814.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21814.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21814 {
+    <#
+    .SYNOPSIS
+    Privileged accounts are cloud native identities
+    #>
     [CmdletBinding()]
     param (
         [Parameter(Mandatory = $true)]
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21815.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21815.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21815 {
+    <#
+    .SYNOPSIS
+    All privileged role assignments are activated just in time and not permanently active
+    #>
     [CmdletBinding()]
     param (
         [Parameter(Mandatory = $true)]
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21816.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21816.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21816 {
+    <#
+    .SYNOPSIS
+    All Microsoft Entra privileged role assignments are managed with PIM
+    #>
     [CmdletBinding()]
     param (
         [Parameter(Mandatory = $true)]
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21818.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21818.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21818 {
+    <#
+    .SYNOPSIS
+    Privileged role activations have monitoring and alerting configured
+    #>
     [CmdletBinding()]
     param (
         [Parameter(Mandatory = $true)]
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21824.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21824.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21824 {
+    <#
+    .SYNOPSIS
+    Guests don't have long lived sign-in sessions
+    #>
     param($Tenant)
     #Tested
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21828.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21828.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21828 {
+    <#
+    .SYNOPSIS
+    Authentication transfer is blocked
+    #>
     param($Tenant)
     #Tested
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21829.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21829.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21829 {
+    <#
+    .SYNOPSIS
+    Use cloud authentication
+    #>
     param($Tenant)
     #Tested
     $TestId = 'ZTNA21829'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21830.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21830.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21830 {
+    <#
+    .SYNOPSIS
+    Conditional Access policies for Privileged Access Workstations are configured
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21830'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21835.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21835.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21835 {
+    <#
+    .SYNOPSIS
+    Emergency access accounts are configured appropriately
+    #>
     param($Tenant)
     #Untested
     $TestId = 'ZTNA21835'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21836.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21836.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21836 {
+    <#
+    .SYNOPSIS
+    Workload Identities are not assigned privileged roles
+    #>
     param($Tenant)
     #Untested
     $TestId = 'ZTNA21836'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21837.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21837.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21837 {
+    <#
+    .SYNOPSIS
+    Limit the maximum number of devices per user to 10
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21837'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21838.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21838.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21838 {
+    <#
+    .SYNOPSIS
+    Security key authentication method enabled
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21838'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21839.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21839.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21839 {
+    <#
+    .SYNOPSIS
+    Passkey authentication method enabled
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21839'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21840.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21840.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21840 {
+    <#
+    .SYNOPSIS
+    Security key attestation is enforced
+    #>
     param($Tenant)
     #Tested
     $TestId = 'ZTNA21840'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21841.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21841.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21841 {
+    <#
+    .SYNOPSIS
+    Microsoft Authenticator app report suspicious activity setting is enabled
+    #>
     param($Tenant)
     #Tested
     $TestId = 'ZTNA21841'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21842.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21842.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21842 {
+    <#
+    .SYNOPSIS
+    Block administrators from using SSPR
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21842'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21844.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21844.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21844 {
+    <#
+    .SYNOPSIS
+    Block legacy Azure AD PowerShell module
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21844'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21845.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21845.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21845 {
+    <#
+    .SYNOPSIS
+    Temporary access pass is enabled
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21845'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21846.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21846.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21846 {
+    <#
+    .SYNOPSIS
+    Restrict Temporary Access Pass to Single Use
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21846'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21847.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21847.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21847 {
+    <#
+    .SYNOPSIS
+    Password protection for on-premises is enabled
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21847'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21848.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21848.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21848 {
+    <#
+    .SYNOPSIS
+    Add organizational terms to the banned password list
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21848'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21849.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21849.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21849 {
+    <#
+    .SYNOPSIS
+    Smart lockout duration is set to a minimum of 60
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21849'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21850.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21850.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21850 {
+    <#
+    .SYNOPSIS
+    Smart lockout threshold set to 10 or less
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21850'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21858.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21858.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21858 {
+    <#
+    .SYNOPSIS
+    Inactive guest identities are disabled or removed from the tenant
+    #>
     param($Tenant)
     #Tested
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21861.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21861.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21861 {
+    <#
+    .SYNOPSIS
+    All high-risk users are triaged
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21861'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21862.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21862.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21862 {
+    <#
+    .SYNOPSIS
+    All risky workload identities are triaged
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21862'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21863.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21863.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21863 {
+    <#
+    .SYNOPSIS
+    All high-risk sign-ins are triaged
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21863'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21865.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21865.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21865 {
+    <#
+    .SYNOPSIS
+    Named locations are configured
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21865'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21866.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21866.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21866 {
+    <#
+    .SYNOPSIS
+    All Microsoft Entra recommendations are addressed
+    #>
     param($Tenant)
     #Tested
     $TestId = 'ZTNA21866'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21868.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21868.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21868 {
+    <#
+    .SYNOPSIS
+    Guests do not own apps in the tenant
+    #>
     param($Tenant)
 
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21869.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21869.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21869 {
+    <#
+    .SYNOPSIS
+    Enterprise applications must require explicit assignment or scoped provisioning
+    #>
     param($Tenant)
     #tenant
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21872.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21872.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21872 {
+    <#
+    .SYNOPSIS
+    Require multifactor authentication for device join and device registration using user action
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21872'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21874.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21874.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21874 {
+    <#
+    .SYNOPSIS
+    Guest access is limited to approved tenants
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21874'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21877.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21877.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21877 {
+    <#
+    .SYNOPSIS
+    All guests have a sponsor
+    #>
     param($Tenant)
     #Tested
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21886.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21886.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21886 {
+    <#
+    .SYNOPSIS
+    Applications are configured for automatic user provisioning
+    #>
     param($Tenant)
     #Tested
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21896.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21896.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21896 {
+    <#
+    .SYNOPSIS
+    Service principals do not have certificates or credentials associated with them
+    #>
     param($Tenant)
     #tested
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21964.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21964.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21964 {
+    <#
+    .SYNOPSIS
+    Enable protected actions to secure Conditional Access policy creation and changes
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA21964'
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21992.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA21992.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA21992 {
+    <#
+    .SYNOPSIS
+    Application certificates must be rotated on a regular basis
+    #>
     param($Tenant)
 
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA22128.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA22128.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA22128 {
+    <#
+    .SYNOPSIS
+    Guests are not assigned high privileged directory roles
+    #>
     param($Tenant)
     #Tested
     try {
diff --git a/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA24572.ps1 b/Modules/CIPPCore/Public/Tests/ZTNA/Identity/Invoke-CippTestZTNA24572.ps1
@@ -1,4 +1,8 @@
 function Invoke-CippTestZTNA24572 {
+    <#
+    .SYNOPSIS
+    Device enrollment notifications are enforced to ensure user awareness and secure onboarding
+    #>
     param($Tenant)
 
     $TestId = 'ZTNA24572'
