Feat: Enhance Invoke-ListIntuneScript to support assignment resolution for scripts

Author: kris6673

Modules/CIPPCore/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneScript.ps1

@@ -15,26 +15,31 @@ function Invoke-ListIntuneScript {
     $TenantFilter = $Request.Query.tenantFilter
     $Results = [System.Collections.Generic.List[System.Object]]::new()
 
-    $BulkRequests = [PSCustomObject]@(
+    $BulkRequests = @(
+        @{
+            id     = 'Groups'
+            method = 'GET'
+            url    = '/groups?$top=999&$select=id,displayName'
+        }
         @{
             id     = 'Windows'
             method = 'GET'
-            url    = '/deviceManagement/deviceManagementScripts'
+            url    = '/deviceManagement/deviceManagementScripts?$expand=assignments'
         }
         @{
             id     = 'MacOS'
             method = 'GET'
-            url    = '/deviceManagement/deviceShellScripts'
+            url    = '/deviceManagement/deviceShellScripts?$expand=assignments'
         }
         @{
             id     = 'Remediation'
             method = 'GET'
-            url    = '/deviceManagement/deviceHealthScripts'
+            url    = '/deviceManagement/deviceHealthScripts?$expand=assignments'
         }
         @{
             id     = 'Linux'
             method = 'GET'
-            url    = '/deviceManagement/configurationPolicies'
+            url    = '/deviceManagement/configurationPolicies?$expand=assignments'
         }
     )
 
@@ -45,6 +50,9 @@ function Invoke-ListIntuneScript {
         Write-Host "Failed to retrieve scripts. Error: $($ErrorMessage.NormalizedError)"
     }
 
+    # Extract groups for resolving assignment names
+    $Groups = ($BulkResults | Where-Object { $_.id -eq 'Groups' }).body.value
+
     foreach ($scriptId in @('Windows', 'MacOS', 'Remediation', 'Linux')) {
         $BulkResult = ($BulkResults | Where-Object { $_.id -eq $scriptId })
         if ($BulkResult.status -ne 200) {
@@ -65,6 +73,33 @@ function Invoke-ListIntuneScript {
             $scripts | ForEach-Object { $_ | Add-Member -MemberType NoteProperty -Name displayName -Value $_.name -Force }
         }
 
+        # Process assignments for each script
+        foreach ($script in $scripts) {
+            $ScriptAssignment = [System.Collections.Generic.List[string]]::new()
+            $ScriptExclude = [System.Collections.Generic.List[string]]::new()
+
+            if ($script.assignments) {
+                foreach ($Assignment in $script.assignments) {
+                    $target = $Assignment.target
+                    switch ($target.'@odata.type') {
+                        '#microsoft.graph.allDevicesAssignmentTarget' { $ScriptAssignment.Add('All Devices') }
+                        '#microsoft.graph.allLicensedUsersAssignmentTarget' { $ScriptAssignment.Add('All Licensed Users') }
+                        '#microsoft.graph.groupAssignmentTarget' {
+                            $groupName = ($Groups | Where-Object { $_.id -eq $target.groupId }).displayName
+                            if ($groupName) { $ScriptAssignment.Add($groupName) }
+                        }
+                        '#microsoft.graph.exclusionGroupAssignmentTarget' {
+                            $groupName = ($Groups | Where-Object { $_.id -eq $target.groupId }).displayName
+                            if ($groupName) { $ScriptExclude.Add($groupName) }
+                        }
+                    }
+                }
+            }
+
+            $script | Add-Member -NotePropertyName 'ScriptAssignment' -NotePropertyValue ($ScriptAssignment -join ', ') -Force
+            $script | Add-Member -NotePropertyName 'ScriptExclude' -NotePropertyValue ($ScriptExclude -join ', ') -Force
+        }
+
         $scripts | Add-Member -MemberType NoteProperty -Name scriptType -Value $scriptId
         Write-Host "$scriptId scripts count: $($scripts.Count)"
         $Results.AddRange(@($scripts))