GraphKit

0.3.0

GraphKit.psd1

                                #

# Module manifest for module 'GraphKit'

#

# Generated by: Adam Gell

#

# Generated on: 8/15/2026

#

@{

# Script module or binary module file associated with this manifest.

RootModule = 'GraphKit.psm1'

# Version number of this module.

ModuleVersion = '0.3.0'

# Supported PSEditions

# CompatiblePSEditions = @()

# ID used to uniquely identify this module

GUID = '212637ed-2571-4e88-8df2-888a0c163ccd'

# Author of this module

Author = 'Adam Gell'

# Company or vendor of this module

CompanyName = 'Adam Gell'

# Copyright statement for this module

Copyright = '(c) Adam Gell. All rights reserved.'

# Description of the functionality provided by this module

Description = 'App-only, multi-tenant Microsoft Graph execution and analysis layer with explicit Intune and Entra operation semantics.'

# Minimum version of the PowerShell engine required by this module

PowerShellVersion = '7.4'

# Name of the PowerShell host required by this module

# PowerShellHostName = ''

# Minimum version of the PowerShell host required by this module

# PowerShellHostVersion = ''

# Minimum version of Microsoft .NET Framework required by this module. This prerequisite is valid for the PowerShell Desktop edition only.

# DotNetFrameworkVersion = ''

# Minimum version of the common language runtime (CLR) required by this module. This prerequisite is valid for the PowerShell Desktop edition only.

# ClrVersion = ''

# Processor architecture (None, X86, Amd64) required by this module

# ProcessorArchitecture = ''

# Modules that must be imported into the global environment prior to importing this module

RequiredModules = @(

    # MSAL delivery vehicle only - Connect-MgGraph is never called. See the design spec.

    @{ ModuleName = 'Microsoft.Graph.Authentication'; ModuleVersion = '2.38.1' }

)

# Assemblies that must be loaded prior to importing this module

# RequiredAssemblies = @()

# Script files (.ps1) that are run in the caller's environment prior to importing this module.

# ScriptsToProcess = @()

# Type files (.ps1xml) to be loaded when importing this module

# TypesToProcess = @()

# Format files (.ps1xml) to be loaded when importing this module

# CopyPaths in build.yaml only PACKAGES the format file; it must also be

# REGISTERED here or default views silently never apply.

FormatsToProcess = @('Formats/GraphKit.Format.ps1xml')

# Modules to import as nested modules of the module specified in RootModule/ModuleToProcess

# NestedModules = @()

# Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.

FunctionsToExport = @('Compare-GraphPermission','Export-GraphResult','Get-GraphAppRegistrationPermission','Get-GraphContext','Get-GraphObject','Get-GraphOperation','Get-GraphTenant','Grant-GraphAppPermission','Import-GraphLegacyProfile','Invoke-GraphBatch','Invoke-GraphOperation','Register-GraphTenant','Remove-GraphTenant','Test-GraphPermission','Test-GraphTenant','Use-GraphTenant')

# Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.

CmdletsToExport = @()

# Variables to export from this module

VariablesToExport = @()

# Aliases to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no aliases to export.

AliasesToExport = @()

# DSC resources to export from this module

DscResourcesToExport = @()

# List of all modules packaged with this module

# ModuleList = @()

# List of all files packaged with this module

# FileList = @()

# Private data to pass to the module specified in RootModule/ModuleToProcess. This may also contain a PSData hashtable with additional module metadata used by PowerShell.

PrivateData = @{

    PSData = @{

        # Tags applied to this module. These help with module discovery in online galleries.

        # No spaces permitted; PSGallery adds 'PSModule' itself.

        Tags = @(

            'Microsoft365'

            'MicrosoftGraph'

            'Graph'

            'Intune'

            'Entra'

            'EntraID'

            'MDM'

            'DeviceManagement'

            'MultiTenant'

            'AppOnly'

            'Automation'

            'Windows'

            'Linux'

            'MacOS'

        )

        # A URL to the license for this module.

        LicenseUri = 'https://opensource.org/licenses/MIT'

        # A URL to the main website for this project.

        # ProjectUri = ''

        # A URL to an icon representing this module.

        # IconUri = ''

        # ReleaseNotes of this module

        ReleaseNotes = @'

0.3.0

Integrated next package. The published PSGallery 0.2.2 artifact remains immutable.

CHANGED

- Microsoft.PowerShell.SecretManagement 1.1.2+ is resolved only at first vault use.

  Non-vault import, managed identity, help, and catalog inspection no longer require it.

- Vault commands are module-qualified and the boundary rejects an unavailable or too-old

  SecretManagement module instead of accepting unrelated same-named functions.

- Install-GraphKitPinned installs only hard Microsoft.Graph.Authentication by default for

  0.3.0, offers -InstallSecretManagement for vault hosts, and preserves automatic

  SecretManagement installation for immutable 0.2.2 pins.

ADDED AND LIVE-VERIFIED 2026-08-29

- DeviceManagementUnifiedRoleAssignment.ListBeta with required roleDefinition/principals

  expansion and DeviceManagementRBAC.Read.All.

- DeviceManagementTemplate.ListBeta, DeviceManagementConfigurationPolicyTemplate.ListBeta,

  and DeviceManagementIntent.ListBeta for legacy baseline and current Settings Catalog

  template/version, assignment, lifecycle, and deprecation interpretation.

- ManagedDeviceCleanupRule.ListBeta, the documented per-platform collection, replacing the

  obsolete undocumented managedDeviceCleanupSettings singleton.

VERIFICATION CORRECTION

- NamedLocation.List is positively proven app-only with Policy.Read.All. The narrower

  Policy.Read.ConditionalAccess scope remains insufficient.

- DeviceManagementScript.List remains scope-gated: the service named

  DeviceManagementScripts.Read.All in its 403, but no successful live response is claimed.

Requires PowerShell 7.4+.

'@

        # Prerelease string of this module

        Prerelease =  ''

        # Flag to indicate whether the module requires explicit user acceptance for install/update/save

        # RequireLicenseAcceptance = $false

        # External dependent modules of this module

        # Do not mark Microsoft.Graph.Authentication external: Publish-Module omits external

        # modules from the package nuspec, leaving a clean installer with no MSAL dependency

        # metadata. SecretManagement is intentionally not a RequiredModule; vault-backed paths

        # validate it on demand so non-vault flows do not install or load it.

        # ExternalModuleDependencies = @()

    } # End of PSData hashtable

} # End of PrivateData hashtable

# HelpInfo URI of this module

# HelpInfoURI = ''

# Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix.

# DefaultCommandPrefix = ''

}