Skip to content

Commit c8939bd

Browse files
Bugfix/issue 775 - 21814 - removing filters from privileged roles (#1109)
* removing all todo comments * removing filters from privileged roles data * updating casing in report * Fix typo in on-premise to on-premises --------- Co-authored-by: Aleksandar Nikolić <alexandair@live.com>
1 parent b9b08f1 commit c8939bd

1 file changed

Lines changed: 6 additions & 9 deletions

File tree

src/powershell/tests/Test-Assessment.21814.ps1

Lines changed: 6 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -25,15 +25,13 @@ function Test-Assessment-21814 {
2525
$activity = "Checking cloud only roles"
2626
Write-ZtProgress -Activity $activity -Status "Getting roles"
2727

28-
$roles = Get-ZTRole -IncludePrivilegedRoles
2928
# Get all privileged roles
30-
# TODO: Remove filter for GA and Global Reader, limiting during testing time.
31-
$privilegedRoles = $roles | Where-Object { $_.displayName -in @('Global Administrator', 'Global Reader') }
29+
$privilegedRoles = Get-ZTRole -IncludePrivilegedRoles
3230

3331
foreach ($role in $privilegedRoles) {
3432
Write-ZtProgress -Activity $activity -Status "Getting members in role $($role.displayName)"
3533
$roleMembers = Get-ZtRoleMember -RoleId $role.id
36-
# TODO : For groups get transitive members
34+
3735
$roleUsers = $roleMembers | Where-Object { $_.'@odata.type' -eq "#microsoft.graph.user" }
3836

3937
$ztUsers = @()
@@ -51,17 +49,16 @@ function Test-Assessment-21814 {
5149
}
5250
else {
5351
$onpremUserCount = ($privilegedRoles.ZtUsers | Where-Object { $_.onPremisesSyncEnabled }).Count
54-
$testResultMarkdown += "This tenant has $onpremUserCount privileged users that are synced from on-premise.`n`n%TestResult%"
52+
$testResultMarkdown += "This tenant has $onpremUserCount privileged users that are synced from on-premises.`n`n%TestResult%"
5553
}
5654

57-
#TODO: Make user names clickable
58-
$mdInfo = "## Privileged Roles`n`n"
59-
$mdInfo += "| Role Name | User | Source | Status |`n"
55+
$mdInfo = "## Privileged roles`n`n"
56+
$mdInfo += "| Role name | User | Source | Status |`n"
6057
$mdInfo += "| :--- | :--- | :--- | :---: |`n"
6158
foreach ($role in $privilegedRoles | Sort-Object displayName) {
6259
foreach ($user in $role.ZtUsers) {
6360
if ($user.onPremisesSyncEnabled) {
64-
$type = "Synced from on-premise"
61+
$type = "Synced from on-premises"
6562
$status = ""
6663
}
6764
else {

0 commit comments

Comments
 (0)