TMF

Helper module to manage Azure AD Tenants as code.

Minimum PowerShell version

5.1

Installation Options

Owners

• tenant-management-framework

Copyright

Copyright (c) 2021 Volkswagen Group Services GmbH

Package Details

FileList

• TMF.nuspec
• LICENSE
• internal\data\configuration\conditionalAccessPolicies\policies.json
• internal\data\configuration\crossTenantAccess\crossTenantAccessDefaultSettings\crossTenantAccessDefaultSettings.json
• TMF.psd1
• internal\data\configuration\crossTenantAccess\crossTenantAccessDefaultSettings\example.md
• TMF.psm1
• internal\data\configuration\crossTenantAccess\crossTenantAccessPartnerSettings\crossTenantAccessPartnerSettings.json
• en-us\about_TMF.help.txt
• internal\data\configuration\crossTenantAccess\crossTenantAccessPartnerSettings\example.md
• en-us\strings.psd1
• internal\data\configuration\crossTenantAccess\crossTenantAccessPolicy\crossTenantAccessPolicy.json
• functions\readme.md
• internal\data\configuration\crossTenantAccess\crossTenantAccessPolicy\example.md
• functions\accessReviews\Invoke-TmfAccessReview.ps1
• internal\data\configuration\customSecurityAttributes\attributeSets\attributeSets.json
• functions\accessReviews\Register-TmfAccessReview.ps1
• internal\data\configuration\customSecurityAttributes\attributeSets\example.md
• functions\accessReviews\Test-TmfAccessReview.ps1
• internal\data\configuration\customSecurityAttributes\customSecurityAttributeDefinitions\customSecurityAttributeDefinitions.json
• functions\administrativeUnits\Invoke-TmfAdministrativeUnit.ps1
• internal\data\configuration\customSecurityAttributes\customSecurityAttributeDefinitions\example.md
• functions\administrativeUnits\Register-TmfAdministrativeUnit.ps1
• internal\data\configuration\directoryRoles\directoryRoles.json
• functions\administrativeUnits\Test-TmfAdministrativeUnit.ps1
• internal\data\configuration\directoryRoles\example.md
• functions\agreements\Invoke-TmfAgreement.ps1
• internal\data\configuration\entitlementManagement\accessPackageCatalogs\accessPackageCatalogs.json
• functions\agreements\Register-TmfAgreement.ps1
• internal\data\configuration\entitlementManagement\accessPackageCatalogs\example.md
• functions\agreements\Test-TmfAgreement.ps1
• internal\data\configuration\entitlementManagement\accessPackages\accessPackages.json
• functions\authenticationContextClassReferences\Invoke-TmfAuthenticationContextClassReference.ps1
• internal\data\configuration\entitlementManagement\accessPackages\example.md
• functions\authenticationContextClassReferences\Register-TmfAuthenticationContextClassReference.ps1
• internal\data\configuration\groups\example.md
• functions\authenticationContextClassReferences\Test-TmfAuthenticationContextClassReference.ps1
• internal\data\configuration\groups\groups.json
• functions\conditionalAccessPolicies\Invoke-TmfConditionalAccessPolicy.ps1
• internal\data\configuration\namedLocations\example.md
• functions\conditionalAccessPolicies\Register-TmfConditionalAccessPolicy.ps1
• internal\data\configuration\namedLocations\namedLocations.json
• functions\conditionalAccessPolicies\Test-TmfConditionalAccessPolicy.ps1
• internal\data\configuration\organizationalBrandings\example.md
• functions\crossTenantAccess\Invoke-TmfCrossTenantAccess.ps1
• internal\data\configuration\organizationalBrandings\organizationalBrandings.json
• functions\crossTenantAccess\Test-TmfCrossTenantAccess.ps1
• internal\data\configuration\policies\appManagementPolicies\appManagementPolicies.json
• functions\crossTenantAccess\crossTenantAccessDefaultSettings\Invoke-TmfCrossTenantAccessDefaultSetting.ps1
• internal\data\configuration\policies\appManagementPolicies\example.md
• functions\crossTenantAccess\crossTenantAccessDefaultSettings\Register-TmfCrossTenantAccessDefaultSetting.ps1
• internal\data\configuration\policies\authenticationFlowsPolicies\authenticationFlowsPolicies.json
• functions\crossTenantAccess\crossTenantAccessDefaultSettings\Test-TmfCrossTenantAccessDefaultSetting.ps1
• internal\data\configuration\policies\authenticationFlowsPolicies\example.md
• functions\crossTenantAccess\crossTenantAccessPartnerSettings\Invoke-TmfCrossTenantAccessPartnerSetting.ps1
• internal\data\configuration\policies\authenticationMethodsPolicies\authenticationMethodsPolicies.json
• functions\crossTenantAccess\crossTenantAccessPartnerSettings\Register-TmfCrossTenantAccessPartnerSetting.ps1
• internal\data\configuration\policies\authenticationMethodsPolicies\example.md
• functions\crossTenantAccess\crossTenantAccessPartnerSettings\Test-TmfCrossTenantAccessPartnerSetting.ps1
• internal\data\configuration\policies\authenticationStrengthPolicies\authenticationStrengthPolicies.json
• functions\crossTenantAccess\crossTenantAccessPolicy\Invoke-TmfCrossTenantAccessPolicy.ps1
• internal\data\configuration\policies\authenticationStrengthPolicies\example.md
• functions\crossTenantAccess\crossTenantAccessPolicy\Register-TmfCrossTenantAccessPolicy.ps1
• internal\data\configuration\policies\authorizationPolicies\authorizationPolicies.json
• functions\crossTenantAccess\crossTenantAccessPolicy\Test-TmfCrossTenantAccessPolicy.ps1
• internal\data\configuration\policies\authorizationPolicies\example.md
• functions\customSecurityAttributes\Invoke-TmfCustomSecurityAttribute.ps1
• internal\data\configuration\policies\tenantAppManagementPolicy\example.md
• functions\customSecurityAttributes\Test-TmfCustomSecurityAttribute.ps1
• internal\data\configuration\policies\tenantAppManagementPolicy\tenantAppManagementPolicy.json
• functions\customSecurityAttributes\attributeSets\Invoke-TmfAttributeSet.ps1
• internal\data\configuration\roleManagement\roleAssignments\example.md
• functions\customSecurityAttributes\attributeSets\Register-TmfAttributeSet.ps1
• internal\data\configuration\roleManagement\roleAssignments\roleAssignments.json
• functions\customSecurityAttributes\attributeSets\Test-TmfAttributeSet.ps1
• internal\data\configuration\roleManagement\roleDefinitions\example.md
• functions\customSecurityAttributes\customSecurityAttributeAllowedValues\Invoke-TmfCustomSecurityAttributeAllowedValue.ps1
• internal\data\configuration\roleManagement\roleDefinitions\roleDefinitions.json
• functions\customSecurityAttributes\customSecurityAttributeAllowedValues\Register-TmfCustomSecurityAttributeAllowedValue.ps1
• internal\data\configuration\roleManagement\roleManagementPolicies\example.md
• functions\customSecurityAttributes\customSecurityAttributeAllowedValues\Test-TmfCustomSecurityAttributeAllowedValue.ps1
• internal\data\configuration\roleManagement\roleManagementPolicies\roleManagementPolicies.json
• functions\customSecurityAttributes\customSecurityAttributeDefinitions\Invoke-TmfCustomSecurityAttributeDefinition.ps1
• internal\data\configuration\roleManagement\roleManagementPolicyRuleTemplates\example.md
• functions\customSecurityAttributes\customSecurityAttributeDefinitions\Register-TmfCustomSecurityAttributeDefinition.ps1
• internal\data\configuration\roleManagement\roleManagementPolicyRuleTemplates\roleManagementPolicyRuleTemplates.json
• functions\customSecurityAttributes\customSecurityAttributeDefinitions\Test-TmfCustomSecurityAttributeDefinition.ps1
• internal\data\configuration\stringMappings\stringMappings.json
• functions\directoryRoles\Invoke-TmfDirectoryRole.ps1
• internal\data\configuration\users\example.md
• functions\directoryRoles\Register-TmfDirectoryRole.ps1
• internal\data\configuration\users\users.json
• functions\directoryRoles\Test-TmfDirectoryRole.ps1
• internal\functions\Get-ActionColor.ps1
• functions\entitlementManagement\Invoke-TmfEntitlementManagement.ps1
• internal\functions\New-TestResult.ps1
• functions\entitlementManagement\Test-TmfEntitlementManagement.ps1
• internal\functions\readme.md
• functions\entitlementManagement\accessPackageAssignmentPolicies\Invoke-TmfAccessPackageAssignmentPolicy.ps1
• internal\functions\Test-AzureConnection.ps1
• functions\entitlementManagement\accessPackageAssignmentPolicies\Register-TmfAccessPackageAssignmentPolicy.ps1
• internal\functions\Test-GraphConnection.ps1
• functions\entitlementManagement\accessPackageAssignmentPolicies\Test-TmfAccessPackageAssignmentPolicy.ps1
• internal\functions\check\Check-SubjectSetRequiresUpdate.ps1
• functions\entitlementManagement\accessPackageCatalogs\Invoke-TmfAccessPackageCatalog.ps1
• internal\functions\check\Check-UserSetRequiresUpdate.ps1
• functions\entitlementManagement\accessPackageCatalogs\Register-TmfAccessPackageCatalog.ps1
• internal\functions\compare\Compare-AppManagementPolicyRestrictions.ps1
• functions\entitlementManagement\accessPackageCatalogs\Test-TmfAccessPackageCatalog.ps1
• internal\functions\compare\Compare-AssignedLicenses.ps1
• functions\entitlementManagement\accessPackageResource\Invoke-TmfAccessPackageResource.ps1
• internal\functions\compare\Compare-Hashtable.ps1
• functions\entitlementManagement\accessPackageResource\Register-TmfAccessPackageResource.ps1
• internal\functions\compare\Compare-PolicyProperties.ps1
• functions\entitlementManagement\accessPackageResource\Test-TmfAccessPackageResource.ps1
• internal\functions\compare\Compare-ResourceList.ps1
• functions\entitlementManagement\accessPackages\Invoke-TmfAccessPackage.ps1
• internal\functions\resolve\readme.md
• functions\entitlementManagement\accessPackages\Register-TmfAccessPackage.ps1
• internal\functions\resolve\Resolve-AccessPackage.ps1
• functions\entitlementManagement\accessPackages\Test-TmfAccessPackage.ps1
• internal\functions\resolve\Resolve-AccessPackageCatalog.ps1
• functions\general\Activate-TmfConfiguration.ps1
• internal\functions\resolve\Resolve-AccessPackageResource.ps1
• functions\general\Beautify-TmfTestResult.ps1
• internal\functions\resolve\Resolve-AdministrativeUnit.ps1
• functions\general\Deactivate-TmfConfiguration.ps1
• internal\functions\resolve\Resolve-Agreement.ps1
• functions\general\Get-TmfActiveConfiguration.ps1
• internal\functions\resolve\Resolve-Application.ps1
• functions\general\Get-TmfDesiredConfiguration.ps1
• internal\functions\resolve\Resolve-ApplicationId.ps1
• functions\general\Get-TmfRequiredScope.ps1
• internal\functions\resolve\Resolve-AuthenticationStrengthPolicy.ps1
• functions\general\Invoke-TmfTenant.ps1
• internal\functions\resolve\Resolve-AzureRoleDefinition.ps1
• functions\general\Load-TmfConfiguration.ps1
• internal\functions\resolve\Resolve-ConnectedOrganization.ps1
• functions\general\New-TmfConfiguration.ps1
• internal\functions\resolve\Resolve-CustomSecurityAttributeDefinition.ps1
• functions\general\Test-TmfTenant.ps1
• internal\functions\resolve\Resolve-DirectoryObject.ps1
• functions\groups\Invoke-TmfGroup.ps1
• internal\functions\resolve\Resolve-DirectoryRole.ps1
• functions\groups\Register-TmfGroup.ps1
• internal\functions\resolve\Resolve-DirectoryRoleDefinition.ps1
• functions\groups\Test-TmfGroup.ps1
• internal\functions\resolve\Resolve-DirectoryRoleTemplate.ps1
• functions\namedLocations\Invoke-TmfNamedLocation.ps1
• internal\functions\resolve\Resolve-Group.ps1
• functions\namedLocations\Register-TmfNamedLocation.ps1
• internal\functions\resolve\Resolve-NamedLocation.ps1
• functions\namedLocations\Test-TmfNamedLocation.ps1
• internal\functions\resolve\Resolve-ResourceGroup.ps1
• functions\organizationalBrandings\Invoke-TmfOrganizationalBranding.ps1
• internal\functions\resolve\Resolve-ServicePrincipal.ps1
• functions\organizationalBrandings\Register-TmfOrganizationalBranding.ps1
• internal\functions\resolve\Resolve-String.ps1
• functions\organizationalBrandings\Test-TmfOrganizationalBranding.ps1
• internal\functions\resolve\Resolve-SubscribedSku.ps1
• functions\policies\Invoke-TmfPolicy.ps1
• internal\functions\resolve\Resolve-Subscription.ps1
• functions\policies\Test-TmfPolicy.ps1
• internal\functions\resolve\Resolve-User.ps1
• functions\policies\appManagementPolicies\Invoke-TmfAppManagementPolicy.ps1
• internal\functions\templateFunctions\Assert-TemplateFunctions.ps1
• functions\policies\appManagementPolicies\Register-TmfAppManagementPolicy.ps1
• internal\functions\validate\readme.md
• functions\policies\appManagementPolicies\Test-TmfAppManagementPolicy.ps1
• internal\functions\validate\Validate-AccessReviewPattern.ps1
• functions\policies\authenticationFlowsPolicies\Invoke-TmfAuthenticationFlowsPolicy.ps1
• internal\functions\validate\Validate-AccessReviewRange.ps1
• functions\policies\authenticationFlowsPolicies\Register-TmfAuthenticationFlowsPolicy.ps1
• internal\functions\validate\Validate-AccessReviewRecurrence.ps1
• functions\policies\authenticationFlowsPolicies\Test-TmfAuthenticationFlowsPolicy.ps1
• internal\functions\validate\Validate-AccessReviewReviewers.ps1
• functions\policies\authenticationMethodsPolicies\Invoke-TmfAuthenticationMethodsPolicy.ps1
• internal\functions\validate\Validate-AccessReviewScope.ps1
• functions\policies\authenticationMethodsPolicies\Register-TmfAuthenticationMethodsPolicy.ps1
• internal\functions\validate\Validate-AccessReviewSettings.ps1
• functions\policies\authenticationMethodsPolicies\Test-TmfAuthenticationMethodsPolicy.ps1
• internal\functions\validate\Validate-ApplicationEnforcedRestrictionsSessionControl.ps1
• functions\policies\authenticationStrengthPolicies\Invoke-TmfAuthenticationStrengthPolicy.ps1
• internal\functions\validate\Validate-ApprovalStage.ps1
• functions\policies\authenticationStrengthPolicies\Register-TmfAuthenticationStrengthPolicy.ps1
• internal\functions\validate\Validate-AssignedLicense.ps1
• functions\policies\authenticationStrengthPolicies\Test-TmfAuthenticationStrengthPolicy.ps1
• internal\functions\validate\Validate-AssignmentReviewPattern.ps1
• functions\policies\authorizationPolicies\Invoke-TmfAuthorizationPolicy.ps1
• internal\functions\validate\Validate-AssignmentReviewRange.ps1
• functions\policies\authorizationPolicies\Register-TmfAuthorizationPolicy.ps1
• internal\functions\validate\Validate-AssignmentReviewRecurrence.ps1
• functions\policies\authorizationPolicies\Test-TmfAuthorizationPolicy.ps1
• internal\functions\validate\Validate-AssignmentReviewSchedule.ps1
• functions\policies\tenantAppManagementPolicies\Invoke-TmfTenantAppManagementPolicy.ps1
• internal\functions\validate\Validate-AssignmentReviewSettings.ps1
• functions\policies\tenantAppManagementPolicies\Register-TmfTenantAppManagementPolicy.ps1
• internal\functions\validate\Validate-CloudAppSecuritySessionControl.ps1
• functions\policies\tenantAppManagementPolicies\Test-TmfTenantAppManagementPolicy.ps1
• internal\functions\validate\Validate-ConditionalAccessApplicationFilter.ps1
• functions\roleManagement\Invoke-TmfRoleManagement.ps1
• internal\functions\validate\Validate-ConditionalAccessApplications.ps1
• functions\roleManagement\Test-TmfRoleManagement.ps1
• internal\functions\validate\Validate-ConditionalAccessAuthenticationStrength.ps1
• functions\roleManagement\roleAssignments\Invoke-TmfRoleAssignment.ps1
• internal\functions\validate\Validate-ConditionalAccessConditionSet.ps1
• functions\roleManagement\roleAssignments\Register-TmfRoleAssignment.ps1
• internal\functions\validate\Validate-ConditionalAccessDevices.ps1
• functions\roleManagement\roleAssignments\Test-TmfRoleAssignment.ps1
• internal\functions\validate\Validate-ConditionalAccessFilter.ps1
• functions\roleManagement\roleDefinitions\Invoke-TmfRoleDefinition.ps1
• internal\functions\validate\Validate-ConditionalAccessGrantControls.ps1
• functions\roleManagement\roleDefinitions\Register-TmfRoleDefinition.ps1
• internal\functions\validate\Validate-ConditionalAccessLocations.ps1
• functions\roleManagement\roleDefinitions\Test-TmfRoleDefinition.ps1
• internal\functions\validate\Validate-ConditionalAccessPlatforms.ps1
• functions\roleManagement\roleManagementPolicies\Invoke-TmfRoleManagementPolicy.ps1
• internal\functions\validate\Validate-ConditionalAccessSessionControls.ps1
• functions\roleManagement\roleManagementPolicies\Register-TmfRoleManagementPolicy.ps1
• internal\functions\validate\Validate-ConditionalAccessUsers.ps1
• functions\roleManagement\roleManagementPolicies\Test-TmfRoleManagementPolicy.ps1
• internal\functions\validate\Validate-PersistentBrowserSessionControl.ps1
• functions\roleManagement\roleManagementPolicyRuleTemplates\Register-TmfRoleManagementPolicyRuleTemplate.ps1
• internal\functions\validate\Validate-RequestApprovalSettings.ps1
• functions\stringMappings\Register-TmfStringMapping.ps1
• internal\functions\validate\Validate-RequestorSettings.ps1
• internal\data\configuration\accessReviews\accessReviews.json
• internal\functions\validate\Validate-SignInFrequencySessionControl.ps1
• internal\data\configuration\accessReviews\example.md
• internal\functions\validate\Validate-SubjectSet.ps1
• internal\data\configuration\administrativeUnits\administrativeUnits.json
• internal\functions\validate\Validate-UserSet.ps1
• internal\data\configuration\administrativeUnits\example.md
• internal\scripts\mappings.ps1
• internal\data\configuration\agreements\agreements.json
• internal\scripts\postimport.ps1
• internal\data\configuration\agreements\example.md
• internal\scripts\preimport.ps1
• internal\data\configuration\agreements\files\Example Terms of Use.pdf
• internal\scripts\readme.md
• internal\data\configuration\authenticationContextClassReferences\authenticationContextClassReferences.json
• internal\scripts\strings.ps1
• internal\data\configuration\authenticationContextClassReferences\example.md
• internal\scripts\variables.ps1
• internal\data\configuration\conditionalAccessPolicies\example.md

Version History