@@ -25,15 +25,13 @@ function Test-Assessment-21814 {
2525 $activity = " Checking cloud only roles"
2626 Write-ZtProgress - Activity $activity - Status " Getting roles"
2727
28- $roles = Get-ZTRole - IncludePrivilegedRoles
2928 # Get all privileged roles
30- # TODO: Remove filter for GA and Global Reader, limiting during testing time.
31- $privilegedRoles = $roles | Where-Object { $_.displayName -in @ (' Global Administrator' , ' Global Reader' ) }
29+ $privilegedRoles = Get-ZTRole - IncludePrivilegedRoles
3230
3331 foreach ($role in $privilegedRoles ) {
3432 Write-ZtProgress - Activity $activity - Status " Getting members in role $ ( $role.displayName ) "
3533 $roleMembers = Get-ZtRoleMember - RoleId $role.id
36- # TODO : For groups get transitive members
34+
3735 $roleUsers = $roleMembers | Where-Object { $_ .' @odata.type' -eq " #microsoft.graph.user" }
3836
3937 $ztUsers = @ ()
@@ -51,17 +49,16 @@ function Test-Assessment-21814 {
5149 }
5250 else {
5351 $onpremUserCount = ($privilegedRoles.ZtUsers | Where-Object { $_.onPremisesSyncEnabled }).Count
54- $testResultMarkdown += " This tenant has $onpremUserCount privileged users that are synced from on-premise .`n`n %TestResult%"
52+ $testResultMarkdown += " This tenant has $onpremUserCount privileged users that are synced from on-premises .`n`n %TestResult%"
5553 }
5654
57- # TODO: Make user names clickable
58- $mdInfo = " ## Privileged Roles`n`n "
59- $mdInfo += " | Role Name | User | Source | Status |`n "
55+ $mdInfo = " ## Privileged roles`n`n "
56+ $mdInfo += " | Role name | User | Source | Status |`n "
6057 $mdInfo += " | :--- | :--- | :--- | :---: |`n "
6158 foreach ($role in $privilegedRoles | Sort-Object displayName) {
6259 foreach ($user in $role.ZtUsers ) {
6360 if ($user.onPremisesSyncEnabled ) {
64- $type = " Synced from on-premise "
61+ $type = " Synced from on-premises "
6562 $status = " ❌"
6663 }
6764 else {
0 commit comments