You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: runbook-dynamicgroup-mfa.ps1
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -17,6 +17,8 @@
17
17
This script is designed for an Azure Runbook to assign users to two Azure AD groups based on their MFA capability (capable / non-capable).
18
18
Before running the runbook, you need to set up an automation account with a managed identity.e).
19
19
20
+
IMPORTANT: Define the variables for the two necessary groups in the Automation Variables as "dynamicmfa_groupid_capable" and "dynamicmfa_groupid_noncapable", or hardcode them in this script.
21
+
20
22
The managed identity requires the following Graph Permissions:
21
23
- User.Read.All
22
24
- Group.Read.All
@@ -29,8 +31,6 @@
29
31
- Microsoft.Graph.Identity.SignIns
30
32
- Microsoft.Graph.Users
31
33
32
-
!!! Important: Define the variables for the two necessary groups in the Automation Variables as "dynamicmfa_groupid_capable" and "dynamicmfa_groupid_noncapable", or hardcode them in this script. !!!
0 commit comments