forked from KelvinTegelaar/CIPP-API
-
Notifications
You must be signed in to change notification settings - Fork 0
[pull] dev from KelvinTegelaar:dev #68
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
pull
wants to merge
655
commits into
isgq-github01:dev
Choose a base branch
from
KelvinTegelaar:dev
base: dev
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Refactored logic to improve handling of orchestrator status, cron string selection, and preferred processor checks. Added cleanup of stale timer function entries from the status table. Removed unnecessary Write-Host statements for cleaner output.
Extended Invoke-ExecBackendURLs.ps1 to include Hosted, OS, SKU, Timezone, and business hours properties. Added Invoke-ExecTimeSettings.ps1 to handle updating timezone and business hours settings for the function app, including validation and Azure app settings update logic.
Adjusted the batch processing loop in Start-AuditLogProcessingOrchestrator.ps1 to process 500 row IDs per batch instead of 1000. This change may help improve performance or avoid issues with large batch sizes.
Added logic to cache users, groups, devices, and service principals lookups in Azure Table Storage for one day. This reduces repeated bulk API requests and improves performance by using cached data when available.
The function now checks for the WEBSITE_AUTH_V2_CONFIG_JSON environment variable and uses it to obtain authentication settings if present, reducing the need for an additional REST call. Falls back to the previous method if the variable is not set.
Refactored Push-AuditLogIngestion to split content listing, downloading, and result aggregation into orchestrated activity functions for improved scalability and maintainability. Added Push-AuditLogIngestionDownload and Push-AuditLogIngestionResults activity functions. Updated orchestration logic in CippEntrypoints.psm1 to support a 'NoScaling' mode. Improved null handling for cached group and device lookups in Test-CIPPAuditLogRules.
Co-authored-by: Zacgoose <[email protected]>
Co-authored-by: Zacgoose <[email protected]>
Co-authored-by: Zacgoose <[email protected]>
Co-authored-by: Zacgoose <[email protected]>
Co-authored-by: Zacgoose <[email protected]>
Introduces Push-CIPPStandardsApplyBatch and Push-CIPPStandardsList entrypoints to support distributed, per-tenant standards listing and aggregation. Refactors Invoke-CIPPStandardsRun to build and orchestrate tenant batches, and moves license and policy timestamp filtering logic from Get-CIPPStandards to Push-CIPPStandardsList for improved scalability and separation of concerns.
Added missing backtick-escaped dollar signs before 'top' in the $top query parameters for several Microsoft Graph API URLs. This ensures correct OData query syntax and proper pagination when retrieving Intune policy data.
Introduces an includeAllTenants flag to control whether tenant-specific or all-tenant templates are included when listing new user defaults. Improves filtering logic to support more flexible template retrieval based on tenant context.
…ogic Return AllTenants user templates along with specific tenant user templates
Fix: Loading issue for ListMailQuarantine with allTenants
Feat: Improve JIT Admin creation and copy button behavior
Feat: Add auto-archiving configuration standard
…flicts `-contains` is case-insensitive as-is, `.ToLowerInvariant()` is wasteful in this case.
Add Get-CIPPAlertIntunePolicyConflicts function
Fix: hashtable alert errors for CIPPAlertOneDriveQuota
Templates with tenant filters that resolve to no tenants (empty groups) are now skipped instead of being assigned an empty tenant list. This prevents unnecessary processing of templates that do not apply to any tenants.
Bug: Handle array type for conditions.users in Conditional Access Template processing
Check accountEnabled property for shared mailbox user
Replaces direct property assignment with Add-Member for 'DynamicRules' to ensure consistency with other property additions in the group entity.
Replaced the loop generating multiple partition key filters with a single filter using 'PartitionKey ge' and 'PartitionKey le' for date ranges. This streamlines the query and improves readability.
Added explicit checks to ensure $Tenant and $StandardKey are not null or empty before accessing or modifying related data structures. This improves robustness and prevents potential runtime errors.
Update template update checks to ensure the source matches the current template repository before updating or skipping. Also, add the -Compress flag to ConvertTo-Json calls to reduce JSON size when storing entities.
The Source property is now included when creating the entity for Add-CIPPAzDataTableEntity, using the value from $Template.Source if available.
Introduces a -SkipCache switch to Get-TenantGroups and updates Invoke-ListTenantGroups to use it, allowing cache bypass for fresh data retrieval. Also improves Update-CIPPDynamicTenantGroups to handle multiple referenced tenant group IDs for 'in' and 'notin' operators, aggregating member IDs across groups.
Introduces IP range management for both custom and default roles, storing allowed IPs in a dedicated table. Updates role creation, cloning, deletion, and listing to handle IP ranges, and enforces IP-based access restrictions in Test-CIPPAccess. Superadmin roles are exempt from IP restrictions to prevent lockout.
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )