EnterprisePolicyAsCode

10.4.5

internal/functions/Confirm-DeleteForStrategy.ps1

function Confirm-DeleteForStrategy {
    [CmdletBinding()]
    param (
        [string] $PacOwner,
        [string] $Strategy,

        [Parameter(Mandatory = $false)]
        $KeepDfcSecurityAssignments = $false
    )

    $shallDelete = switch ($PacOwner) {
        "thisPaC" {
            $true
        }
        "otherPaC" {
            $false
        }
        "unknownOwner" {
            $Strategy -eq "full"
        }
        "managedByDfcSecurityPolicies" {
            !$KeepDfcSecurityAssignments -and $Strategy -eq "full"
        }
        "managedByDfcDefenderPlans" {
            $false
        }
    }
    return $shallDelete
}