MCAS/Functions/Get-MCASOauthApps.ps1 at d96ca2ef810097c3ca02f052d40c56022540a4f6 · microsoft/MCAS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84


function Get-MCASOAuthApps {
<#
.Synopsis
   Get-MCASOAuthApps
.DESCRIPTION
   Get-MCASOAuthApps retrives OAuth Apps that were granted permission
.EXAMPLE

    Get-MCASOAuthApps

    appStatus                : 0
    communityUsage           : 1
    appName                  : WD Antivirus Testground
    isInternal               : False
    firstInstalled           : 1553097013550
    lastInstalled            : 1553097013550
    actions                  : {@{is_blocking=True; uiGovernanceCategory=; display_
                               alert_text=TASKS_ADALIBPY_DISABLE_APP_DISPLAY_ALERT_
                               TEXT; bulk_support=; bulk_display_description=;
                               confirmation_link=; display_title=TASKS_ADALIBPY_DIS
                               ABLE_APP_DISABLE_TITLE; display_description=;
                               optional_notify=True; has_icon=True; display_alert_s
                               uccess_text=TASKS_ADALIBPY_DISABLE_APP_DISPLAY_ALERT
                               _SUCCESS_TEXT; governance_type=;
                               preview_only=False; task_name=DisableAppTask;
                               confirmation_button_text=;
                               confirm_button_style=red; type=application;
                               alert_display_title=}}
    _tid                     : 92719368
    userCount                : 1
    userInstallationCount    : 1
    severity                 : 1
    saasId                   : 11161
    localClientId            : 111111a1-2aaa-3333-cccc-4d444444d44d
    instId                   : 0
    o365AppType              : 0
    homepage                 : https://demo.wd.microsoft.com
    scopes                   : {@{category=N/A; description=View your basic
                               profile info}, @{category=N/A; description=View
                               your email address}, @{category=N/A;
                               description=Sign you in and read your profile}}
    description              : WD Antivirus Testground
    shouldIgnoredInScoreCalc : True
    isAdminConsent           : False
    appId                    : 11161
    snapshotLastModifiedDate : 2019-03-20T16:45:05.928Z
    publisher                : Microsoft
    scanTime                 : 1554310898349
    instanceName             : Office 365
    clientId                 : aa1111a1-bbb2-3c33-d4dd-5ee5ee443333
    _id                      : 5c811382503a8eab728e03a3
    Retrieves all the OAuth Apps that were granted permission

.PARAMETER Credential
    Specifies the credential object containing tenant as username (e.g.
    'contoso.us.portal.cloudappsecurity.com') and the 64-character hexadecimal Oauth token as the password.
#>


    [CmdletBinding()]
    param
    (
        # Specifies the credential object containing tenant as username (e.g. 'contoso.us.portal.cloudappsecurity.com') and the 64-character hexadecimal Oauth token as the password.
        [Parameter(Mandatory = $false)]
        [ValidateNotNullOrEmpty()]
        [System.Management.Automation.PSCredential]$Credential = $CASCredential
    )

Begin{}
Process{
                try {
                    $response = Invoke-MCASRestMethod -Credential $Credential -Path "/cas/api/v1/app_permissions/" -Method Get
                    $oauthapps = $response.data | Where-Object {$_.isinternal -eq $false}
                }
                catch {
                    throw "Error calling MCAS API. The exception was: $_"
                }
}
End{
    $oauthapps
}
}