Skip to content

Commit 2135626

Browse files
committed
Update group creation logic in CA exclusion script
1 parent 8d103ea commit 2135626

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

Modules/CIPPCore/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecCAExclusion.ps1

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,13 +34,16 @@ function Invoke-ExecCAExclusion {
3434
throw "Policy with ID $PolicyId not found in tenant $TenantFilter."
3535
}
3636

37-
$SecurityGroups = New-GraphGetRequest -uri "https://graph.microsoft.com/beta/identity/groups?`$select=id,displayName&`$filter=securityEnabled eq true and mailEnabled eq false&`$count=true" -tenantid $TenantFilter
37+
$SecurityGroups = New-GraphGetRequest -uri "https://graph.microsoft.com/beta/groups?`$select=id,displayName&`$filter=securityEnabled eq true and mailEnabled eq false&`$count=true" -tenantid $TenantFilter
3838
$VacationGroup = $SecurityGroups | Where-Object { $_.displayName -contains "CIPP-Vacation-$($Policy.displayName)" }
3939

4040
if (!$VacationGroup) {
4141
Write-Information "Creating vacation group: CIPP-Vacation-$($Policy.displayName)"
42+
$Guid = [guid]::NewGuid().ToString()
4243
$GroupObject = @{
44+
groupType = 'generic'
4345
displayName = "CIPP-Vacation-$($Policy.displayName)"
46+
username = "vacation$Guid"
4447
securityEnabled = $true
4548
}
4649
$NewGroup = New-CIPPGroup -GroupObject $GroupObject -TenantFilter $TenantFilter -APIName 'Invoke-ExecCAExclusion'

0 commit comments

Comments
 (0)