Public/TenantConfiguration/Baseline/ConfigurationPolicies/JyskIT-Baseline-SEC-LocalUserGroupMembership.json

{
  "templateReference": {
    "templateDisplayName": "Local user group membership",
    "templateFamily": "endpointSecurityAccountProtection",
    "templateId": "22968f54-45fa-486c-848e-f8224aa69772_1",
    "templateDisplayVersion": "Version 1"
  },
  "platforms": "windows10",
  "roleScopeTagIds": [
    "0"
  ],
  "technologies": "mdm",
  "description": "",
  "name": "JyskIT-Baseline-SEC-LocalUserGroupMembership",
  "settings": [
    {
      "id": "0",
      "settingInstance": {
        "@odata.type": "#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance",
        "settingInstanceTemplateReference": {
          "settingInstanceTemplateId": "de06bec1-4852-48a0-9799-cf7b85992d45"
        },
        "groupSettingCollectionValue": [
          {
            "settingValueTemplateReference": null,
            "children": [
              {
                "@odata.type": "#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance",
                "settingInstanceTemplateReference": {
                  "settingInstanceTemplateId": "76fa254e-cbdb-4718-8bdd-cd41e57caa02"
                },
                "groupSettingCollectionValue": [
                  {
                    "settingValueTemplateReference": null,
                    "children": [
                      {
                        "@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
                        "settingInstanceTemplateReference": null,
                        "choiceSettingValue": {
                          "children": [
                            {
                              "@odata.type": "#microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance",
                              "settingInstanceTemplateReference": null,
                              "simpleSettingCollectionValue": [
                                {
                                  "@odata.type": "#microsoft.graph.deviceManagementConfigurationStringSettingValue",
                                  "settingValueTemplateReference": null,
                                  "value": "JyskIT-Baseline-SEC-LocalAdmins"
                                }
                              ],
                              "settingDefinitionId": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_users"
                            }
                          ],
                          "settingValueTemplateReference": null,
                          "value": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype_users"
                        },
                        "settingDefinitionId": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_userselectiontype"
                      },
                      {
                        "@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
                        "settingInstanceTemplateReference": null,
                        "choiceSettingValue": {
                          "children": [],
                          "settingValueTemplateReference": null,
                          "value": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action_add_restrict"
                        },
                        "settingDefinitionId": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_action"
                      },
                      {
                        "@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingCollectionInstance",
                        "settingInstanceTemplateReference": null,
                        "choiceSettingCollectionValue": [
                          {
                            "children": [],
                            "settingValueTemplateReference": null,
                            "value": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc_administrators"
                          }
                        ],
                        "settingDefinitionId": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup_desc"
                      }
                    ]
                  }
                ],
                "settingDefinitionId": "device_vendor_msft_policy_config_localusersandgroups_configure_groupconfiguration_accessgroup"
              }
            ]
          }
        ],
        "settingDefinitionId": "device_vendor_msft_policy_config_localusersandgroups_configure"
      }
    }
  ]
}