-
Notifications
You must be signed in to change notification settings - Fork 124
Open
Description
This test is failing in my tenant with the following result "The current state is ManagedByMicrosoft.".
This aligns perfectly with the actual test code:
if ($result.State -eq 'EnabledForPreApprovedAppsOnly' -or $result.State -eq 'DisabledForAllApps') {
$passed = $true
$testResultMarkdown += "Resource-Specific Consent is restricted.`n`n%TestResult%"
}
else {
$passed = $false
$testResultMarkdown += "Resource-Specific Consent is not restricted.`n`n%TestResult%"
}
However, the guide on MS Learn states the following:
By default, the preapproval policies are managed by Microsoft, and we recommend that organizations maintain ManagedByMicrosoft state. This state allows Microsoft's security team to deliver the best security for your organization.
https://learn.microsoft.com/en-us/microsoftteams/platform/graph-api/rsc/preapproval-instruction-docs
So, unless there is some nuance I'm not catching it looks like a bug.
merill
Metadata
Metadata
Assignees
Labels
No labels