Posh365

0.9.166

Public/Roles/Get-AzureADRoleReport.ps1

function Get-AzureADRoleReport {
    [CmdletBinding()]
    param (
        [Parameter()]
        [hashtable]
        $MFAHash
    )
    $AzureADRoleList = Get-AzureADDirectoryRole
    switch ($PSBoundParameters.Keys) {
        MFAHash {
            foreach ($AzureADRole in $AzureADRoleList) {
                Write-Verbose "Processing $($AzureADRole.DisplayName)"
                $RoleMemberList = Get-AzureADDirectoryRoleMember -ObjectId $AzureADRole.ObjectId
                foreach ($RoleMember in $RoleMemberList) {
                    [PSCustomObject]@{
                        'Role'              = $AzureADRole.DisplayName
                        'DisplayName'       = $RoleMember.DisplayName
                        'UserPrincipalName' = $RoleMember.UserPrincipalName
                        'UserType'          = $RoleMember.UserType
                        'LastDirSyncTime'   = $RoleMember.LastDirSyncTime
                        'MFA_State'         = $MFAHash[$RoleMember.ObjectId].MFA_State
                        'RoleDescription'   = $AzureADRole.Description
                    }
                }

            }
        }
        Default {
            foreach ($AzureADRole in $AzureADRoleList) {
                Write-Verbose "Processing $($AzureADRole.DisplayName)"
                try {
                    $RoleMemberList = Get-AzureADDirectoryRoleMember -ObjectId $AzureADRole.ObjectId -ErrorAction Stop
                    foreach ($RoleMember in $RoleMemberList) {
                        [PSCustomObject]@{
                            'Role'              = $AzureADRole.DisplayName
                            'DisplayName'       = $RoleMember.DisplayName
                            'UserPrincipalName' = $RoleMember.UserPrincipalName
                            'UserType'          = $RoleMember.UserType
                            'LastDirSyncTime'   = $RoleMember.LastDirSyncTime
                            'MFA_State'         = ""
                            'RoleDescription'   = $AzureADRole.Description
                        }
                    }
                }
                catch {

                }
            }
        }
    }
}