Merge branch 'main' into dev

Author: merill

src/powershell/private/tests/Invoke-ZtTests.ps1

@@ -108,7 +108,7 @@
 	# Filter based on Compatible licenses
 	$skippedTestsForLicense = $testsToRun.Where{$_.CompatibleLicense.Count -gt 0 -and (-not (Test-ZtLicense -CompatibleLicense $_.CompatibleLicense)) }
 	$skippedTestsForLicense.ForEach{
-		Write-Warning -Message ('Test {0} is skipped because no compatible license was found' -f $_.TestId)
+		Write-PSFMessage -Message ('Test {0} is skipped because no compatible license was found' -f $_.TestId) -Level Verbose
 		Add-ZtTestResultDetail -SkippedBecause NoCompatibleLicenseFound -TestId $_.TestId
 	}
 

src/powershell/tests/Test-Assessment.25371.ps1

@@ -1,4 +1,4 @@
-<#
+<#
 .SYNOPSIS
     Validates that Universal Continuous Access Evaluation (Universal CAE) is enabled for network access.
 
@@ -23,6 +23,7 @@ function Test-Assessment-25371 {
     	Category = 'Global Secure Access',
     	ImplementationCost = 'Low',
     	MinimumLicense = ('AAD_PREMIUM'),
+    	CompatibleLicense = ('Entra_Premium_Private_Access','Entra_Premium_Internet_Access'),
     	Pillar = 'Network',
     	RiskLevel = 'High',
     	SfiPillar = 'Protect networks',

src/powershell/tests/Test-Assessment.25372.ps1

@@ -1,4 +1,4 @@
-<#
+<#
 .SYNOPSIS
     Validates that Global Secure Access client is deployed on all managed endpoints.
 
@@ -18,6 +18,7 @@ function Test-Assessment-25372 {
         Category = 'Global Secure Access',
         ImplementationCost = 'Medium',
         MinimumLicense = ('AAD_PREMIUM', 'Entra_Premium_Internet_Access', 'Entra_Premium_Private_Access'),
+        CompatibleLicense = ('Entra_Premium_Private_Access','Entra_Premium_Internet_Access'),
         Pillar = 'Network',
         RiskLevel = 'High',
         SfiPillar = 'Protect networks',

src/powershell/tests/Test-Assessment.25375.ps1

@@ -1,4 +1,4 @@
-<#
+<#
 .SYNOPSIS
     Validates that GSA licenses are available in the tenant and assigned to users.
 
@@ -25,6 +25,7 @@ function Test-Assessment-25375 {
     	Category = 'Global Secure Access',
     	ImplementationCost = 'Low',
     	MinimumLicense = ('Entra_Premium_Internet_Access','Entra_Premium_Private_Access'),
+    	CompatibleLicense = ('Entra_Premium_Internet_Access','Entra_Premium_Private_Access'),
     	Pillar = 'Network',
     	RiskLevel = 'High',
     	SfiPillar = 'Protect networks',

src/powershell/tests/Test-Assessment.25376.ps1

@@ -17,6 +17,7 @@ function Test-Assessment-25376 {
         Category = 'Network security',
         ImplementationCost = 'Medium',
         MinimumLicense = 'Entra_Suite',
+        CompatibleLicense = ('Entra_Premium_Private_Access','Entra_Premium_Internet_Access'),
         Pillar = 'Network',
         RiskLevel = 'High',
         SfiPillar = 'Protect networks',

src/powershell/tests/Test-Assessment.25377.ps1

@@ -1,4 +1,4 @@
-<#
+<#
 .SYNOPSIS
     Validates that Universal Tenant Restrictions (UTR) are configured to block access to unauthorized external tenants.
 
@@ -18,6 +18,7 @@ function Test-Assessment-25377 {
     	Category = 'Global Secure Access',
     	ImplementationCost = 'Medium',
     	MinimumLicense = ('AAD_PREMIUM','Entra_Premium_Internet_Access'),
+    	CompatibleLicense = ('Entra_Premium_Internet_Access'),
     	Pillar = 'Network',
     	RiskLevel = 'High',
     	SfiPillar = 'Protect networks',

src/powershell/tests/Test-Assessment.25378.ps1

@@ -17,6 +17,7 @@ function Test-Assessment-25378 {
         Category = 'External Identities',
         ImplementationCost = 'Medium',
         MinimumLicense = 'AAD_PREMIUM',
+        CompatibleLicense = ('AAD_PREMIUM','AAD_PREMIUM_P2'),
         Pillar = 'Network',
         RiskLevel = 'High',
         SfiPillar = 'Protect identities and secrets',

src/powershell/tests/Test-Assessment.25379.ps1

@@ -1,4 +1,4 @@
-<#
+<#
 .SYNOPSIS
     Checks that compliant network controls are configured in Conditional Access policies
 
@@ -17,6 +17,7 @@ function Test-Assessment-25379 {
     	Category = 'Global Secure Access',
     	ImplementationCost = 'Medium',
     	MinimumLicense = ('AAD_PREMIUM'),
+    	CompatibleLicense = ('AAD_PREMIUM','AAD_PREMIUM_P2'),
     	Pillar = 'Network',
     	RiskLevel = 'Medium',
     	SfiPillar = 'Protect networks',

src/powershell/tests/Test-Assessment.25381.ps1

@@ -1,4 +1,4 @@
-<#
+<#
 .SYNOPSIS
     Validates that traffic forwarding profiles are enabled in Global Secure Access.
 
@@ -18,6 +18,7 @@ function Test-Assessment-25381 {
     	Category = 'Global Secure Access',
     	ImplementationCost = 'Medium',
     	MinimumLicense = ('Entra_Suite','Entra_Premium_Private_Access','Entra_Premium_Internet_Access','P2'),
+    	CompatibleLicense = ('Entra_Premium_Private_Access','Entra_Premium_Internet_Access'),
     	Pillar = 'Network',
     	RiskLevel = 'High',
     	SfiPillar = 'Protect networks',

src/powershell/tests/Test-Assessment.25382.ps1

@@ -18,6 +18,7 @@ function Test-Assessment-25382 {
         Category = 'Global Secure Access',
         ImplementationCost = 'Low',
         MinimumLicense = ('Entra_Premium_Private_Access', 'Entra_Premium_Internet_Access'),
+        CompatibleLicense = ('Entra_Premium_Internet_Access','Entra_Premium_Private_Access'),
         Pillar = 'Network',
         RiskLevel = 'High',
         SfiPillar = 'Protect networks',