v1.8.15753

Get it from Powershell Gallery!

New features:

• resourceType parameter for Test/Invoke-TmfTenant to limit execution to specific resourceTypes
• Support for Conditional Access user actions
• Support for roleAssignments/roleManagementPolicies on Azure resource level additional to subscription and resourceGroup level

Enhancements:

• Removed dependencies on additional Graph powershell modules by replacing Get-Mg* commands through Graph API calls
• Support for IDs in subscriptionreference parameter
• Support subfolders in configuration folders (recurse)

Bug fixes:

• Invoke-TmfTenant: Exclude parameter does not work
• Resolve group by ID does not work
• HideFromAddressLists/HideFromOutlookClients only works in creating group
• AccessPackageAssignmentPolicy without parameter "specificAllowedTargets" cannot be invoked

v1.7.12529

Get it from Powershell Gallery!

What's new

• Create groups in administrativeUnits
• Added support for authenticationContextClassReferences

What's changed

• Added scope parameter to roleManagement functions to be able to test/invoke only EntraID or Azure Resource configurations

Internal changes

• Added tests for all resource types. These are run prior to each release to enhance integrity
• Bugfixes

v1.6.2370

Get it from Powershell Gallery!

What's new

• Added support for customSecurityAttributes
• Added support for Azure AD policies (authenticationStrength, appManagementPolicies, tenantAppManagementPolicy)

What's changed

• autoAssignmentPolicies for accessPackages can now be created/managed
• dynamic administrative units can now be created/managed
• applicationFilter for conditionalAccessPolicies can now be uses

Breaking changes

To support autoAssignmentPolicies for accessPackages we had to switch from the beta endpoint to the v1.0 endpoint for this specific resource type. If you had accessPackages already used in your configuration you have to rewrite the definitions to the new format.

Please refer to the wiki page explaining the necessary changes: https://github.com/ATVWGS/tenant-management-framework/wiki/Breaking-Changes#tmf-162268-preview

v1.5.493

Get it from Powershell Gallery!

What's new

• Added support for roleManagement endpoints (roleDefinitions, roleAssignments, roleManagementPolicies) for AzureAD and Azure Resources (Azure REST API)
• Added support for Azure AD policies (authenticationMethodsPolicy, authorizationPolicies, authenticationFlowsPolicies)

What's changed

• licenses on groups can now be managed
• groups can be made privileged access groups
• renaming of accessPackages and accessPackageAssignmentPolicies now possible

Fixed issues

• Typo in accessPackageAssignmentPolicies (accessPackageAssignementPolicies) fixed

v1.4.305

Get it from Powershell Gallery!

What's Changed

• Correct syntax CA policy export by @salty2011 in #3
• Fix for AccessPackage Catalog by @salty2011 in #8
• Extended properties for group resource type
  • resourceBehaviorOptions
  • hideFromAddressLists
  • hideFromOutlookClients

Fixed issues

• PS Module cleaned dependencies
• Invoke-TmfAccessPackageCatalog used Test-TmfAccessPackage instead of Test-TmfAccessPackageCatalog

New Contributors

• @salty2011 made their first contribution in #3

Full Changelog: v1.3...v1.4.281-preview

v1.4.281-preview

Get it from Powershell Gallery

What's Changed

• Correct syntax CA policy export by @salty2011 in #3
• Fix for AccessPackage Catalog by @salty2011 in #8
• Extended properties for group resource type
  • resourceBehaviorOptions
  • hideFromAddressLists
  • hideFromOutlookClients

New Contributors

• @salty2011 made their first contribution in #3

Full Changelog: v1.3...v1.4.281-preview

v1.3.257

Get it from Powershell Gallery.

Added support for resource types

• Access Reviews
• Administrative Units
• Agreements
• ConditionalAccess Policies
• Directory Roles
• EntitlementManagement
• Groups
• NamedLocations

New functionality

• Test/invoke specific resources for each resource type
• Session controls in conditional access policies
• Device filter in conditional access policies

Tests

• Added basic tests for Powershell module
• Added PSScriptAnalyzer tests
• Added basic TMF tests (Create config, load config, test config, invoke config)