Skip to content

Commit ac16961

Browse files
committed
improve ca policy list
1 parent 34a7089 commit ac16961

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

Modules/CIPPCore/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicies.ps1

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
using namespace System.Net
22

3-
Function Invoke-ListConditionalAccessPolicies {
3+
function Invoke-ListConditionalAccessPolicies {
44
<#
55
.FUNCTIONALITY
66
Entrypoint
@@ -164,6 +164,7 @@ Function Invoke-ListConditionalAccessPolicies {
164164
$AllRoleDefinitions = ($GraphRequest | Where-Object { $_.id -eq 'roleDefinitions' }).body.value
165165
$GroupListOutput = ($GraphRequest | Where-Object { $_.id -eq 'groups' }).body.value
166166
$UserListOutput = ($GraphRequest | Where-Object { $_.id -eq 'users' }).body.value
167+
$AllServicePrincipals = ($GraphRequest | Where-Object { $_.id -eq 'servicePrincipals' }).body.value
167168

168169

169170
$GraphRequest = foreach ($cap in $ConditionalAccessPolicyOutput) {
@@ -180,8 +181,8 @@ Function Invoke-ListConditionalAccessPolicies {
180181
excludePlatforms = ($cap.conditions.platforms.excludePlatforms) -join ','
181182
includeLocations = (Get-LocationNameFromId -Locations $AllNamedLocations -id $cap.conditions.locations.includeLocations) -join ','
182183
excludeLocations = (Get-LocationNameFromId -Locations $AllNamedLocations -id $cap.conditions.locations.excludeLocations) -join ','
183-
includeApplications = ($cap.conditions.applications.includeApplications | ForEach-Object { Get-ApplicationNameFromId -Applications $AllApplications -id $_ }) -join ','
184-
excludeApplications = ($cap.conditions.applications.excludeApplications | ForEach-Object { Get-ApplicationNameFromId -Applications $AllApplications -id $_ }) -join ','
184+
includeApplications = ($cap.conditions.applications.includeApplications | ForEach-Object { Get-ApplicationNameFromId -Applications $AllApplications -ServicePrincipals $AllServicePrincipals -id $_ }) -join ','
185+
excludeApplications = ($cap.conditions.applications.excludeApplications | ForEach-Object { Get-ApplicationNameFromId -Applications $AllApplications -ServicePrincipals $AllServicePrincipals -id $_ }) -join ','
185186
includeUserActions = ($cap.conditions.applications.includeUserActions | Out-String)
186187
includeAuthenticationContextClassReferences = ($cap.conditions.applications.includeAuthenticationContextClassReferences | Out-String)
187188
includeUsers = ($cap.conditions.users.includeUsers | ForEach-Object { Get-UserNameFromId -Users $UserListOutput -id $_ }) | Out-String

0 commit comments

Comments
 (0)