Add Ignite samples.

Author: peombwa

samples/5-Teams.ps1

@@ -1,3 +1,22 @@
+# Add team owner.
+New-MgTeamMember -TeamId $InternsTeam.Id -Roles "owner" `
+    -AdditionalProperties @{ 
+        "@odata.type" = "#microsoft.graph.aadUserConversationMember"; 
+        "[email protected]" = "https://graph.microsoft.com/beta/users/" + $teamOwnwerId
+    }
+
+# Add team members.
+foreach ($teamMember in $TeamMembers) {
+    New-MgTeamMember -TeamId $InternsTeam.Id -Roles "member" `
+        -AdditionalProperties @{
+            "@odata.type" = "#microsoft.graph.aadUserConversationMember";
+            "[email protected]" = "https://graph.microsoft.com/beta/users/" + $teamMember.Id
+        }
+}
+
+# Delete team.
+Remove-MgGroup -GroupId $InternsTeam.Id
+
 # Teams Chat snippets
 
 # Get list of 1:1 chats

samples/9-Applications.ps1

@@ -1,3 +1,5 @@
+# Incremental scope consent.
+Connect-Graph -Scopes "Application.ReadWrite.All"
 
 # Create an application for use with DeviceCodeFlow
 $app1 = new-mgApplication   -displayName "DeviceCodeFlowApp" `
@@ -14,4 +16,26 @@ $app3 = new-mgApplication -displayName "ImplicitWebApp" `
          -ImplicitGrantSettingEnableAccessTokenIssuance `
          -ImplicitGrantSettingEnableIdTokenIssuance `
          -WebRedirectUris "https://localhost:3000/"                            
-         
+
+# Get certificate from current user store.
+$CertificateThumbprint = "THUMBPRINT"
+$Certificate = Get-ChildItem -Path "Cert:\CurrentUser\My\$CertificateThumbprint"
+
+# Graph resource Id
+$GraphResourceId = "00000003-0000-0000-c000-000000000000"
+
+# Graph permissions constants
+$UserReadAll = @{ Id = "df021288-bdef-4463-88db-98f22de89214"; Type = "Role" }
+$GroupReadAll = @{ Id = "5b567255-7703-4780-807c-7be8301ae99b"; Type = "Role" }
+$MailboxSettingsRead = @{ Id = "40f97065-369a-49f4-947c-6a255697ae91"; Type = "Role" }
+$MailSend = @{ Id = "b633e1c5-b582-4048-a93e-9f11b44c7e96"; Type = "Role" }
+
+# Create an application registration.
+$AppName = "ScriptedGraphPSApp"
+$app4 = New-MgApplication -"ClientCredentialApp" $AppName `
+                    -SignInAudience "AzureADMyOrg" `
+                    -RequiredResourceAccess @{ ResourceAppId = $graphResourceId; ResourceAccess = $UserReadAll, $GroupReadAll, $MailboxSettingsRead, $MailSend } `
+                    -KeyCredentials @(@{ Type = "AsymmetricX509Cert"; Usage = "Verify"; Key= $Certificate.RawData })
+
+# Create corresponding service principal.
+New-MgServicePrincipal -AppId $appRegistration.AppId

samples/Scripts/UsersAndGroups.ps1

@@ -0,0 +1,58 @@
+$TenantId = "TENANT_ID"
+$ClientId = "CLIENT_ID"
+$CertThumbprint = "CERT_THUMBPRINT"
+$AdminMail = "ADMIN_MAIL"
+
+# Consent to permissions using app created in the last demo.
+$AdminConsentUrl = "https://login.microsoftonline.com/$TenantId/adminconsent?client_id=$ClientId"
+Write-Host -ForeGroundColor Yellow "Please go to the following URL in your browser to provide admin consent"
+Write-Host $AdminConsentUrl
+Write-Host "Press any key to continue when done ....."
+$Key = $host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")
+
+# Authenticate as a confidential client for app only calls.
+Connect-Graph -ClientId $ClientId -TenantId $TenantId -CertificateThumbprint $CertThumbprint
+
+# Get group named 'Weekday Employees'
+$WeekdayEmployeesGroup = Get-MgGroup -Filter "DisplayName eq 'Weekday Employees'"
+
+# Get Members of the group.
+$GroupMembers = Get-MgGroupMember -GroupId $WeekdayEmployeesGroup.Id
+$ToRecipients = @()
+foreach ($member in $GroupMembers) {
+    $User = Get-MgUser -UserId $member.Id -Select "displayName", "mail", "mailboxSettings" | `
+                        Select DisplayName, Mail, MailboxSettings
+
+    # Get users with invalid workdays in their mailbox setting.
+    if ( $User.MailboxSettings.WorkingHours.DaysOfWeek -contains "saturday" || `
+         $User.MailboxSettings.WorkingHours.DaysOfWeek -contains "sunday" ) {
+             Write-Host -ForegroundColor Yellow "User "$User.DisplayName" has an invalid workday."
+
+            $ToRecipients += @{ 
+                emailAddress = @{
+                    name = $User.DisplayName;
+                    address = $User.Mail
+                }}
+    }
+}
+
+if ($ToRecipients.Length) {
+    # Compose message.
+    $Message = @{
+        subject = "Update Your Mailbox Settings!";
+        toRecipients = $ToRecipients;
+        body = @{
+            contentType = "Text";
+            content = "Please update to your mailbox settings to reflect your working hours." + `
+                    " You currently have Saturday and/or Sunday set as workday."
+        }
+    }
+    
+    $Admin = Get-MgUser -UserId $AdminMail
+
+    # Send mail to users with invalid workdays.
+    Send-MgUserMail -UserId $Admin.Id -BodyParameter @{message = $Message}
+    Write-Host -ForegroundColor Green "Mail sent to affected users."
+}
+
+Disconnect-Graph