DSCResources/MSFT_IntuneAccountProtectionLocalUserGroupMembershipPolicy/MSFT_IntuneAccountProtectionLocalUserGroupMembershipPolicy.schema.mof

[ClassVersion("1.0.0.0")]
class MSFT_IntuneAccountProtectionLocalUserGroupMembershipPolicyAssignments
{
    [Write, Description("The type of the target assignment."), ValueMap{"#microsoft.graph.groupAssignmentTarget", "#microsoft.graph.allLicensedUsersAssignmentTarget", "#microsoft.graph.allDevicesAssignmentTarget", "#microsoft.graph.exclusionGroupAssignmentTarget", "#microsoft.graph.configurationManagerCollectionAssignmentTarget"}, Values{"#microsoft.graph.groupAssignmentTarget", "#microsoft.graph.allLicensedUsersAssignmentTarget", "#microsoft.graph.allDevicesAssignmentTarget", "#microsoft.graph.exclusionGroupAssignmentTarget", "#microsoft.graph.configurationManagerCollectionAssignmentTarget"}] String dataType;
    [Write, Description("The type of filter of the target assignment i.e. Exclude or Include. Possible values are:none, include, exclude."), ValueMap{"none", "include", "exclude"}, Values{"none", "include", "exclude"}] String deviceAndAppManagementAssignmentFilterType;
    [Write, Description("The Id of the filter for the target assignment.")] String deviceAndAppManagementAssignmentFilterId;
    [Write, Description("The group Id that is the target of the assignment.")] String groupId;
    [Write, Description("The group Display Name that is the target of the assignment.")] String groupDisplayName;
    [Write, Description("The collection Id that is the target of the assignment.(ConfigMgr)")] String collectionId;
};
 
[ClassVersion("1.0.0.0")]
class MSFT_IntuneAccountProtectionLocalUserGroupCollection
{
    [Write, Description("The action to use for adding / removing members."), ValueMap{"add_update", "remove_update", "add_replace"}, Values{"add_update", "remove_update", "add_replace"}] String Action;
    [Write, Description("The local groups to add / remove the members to / from. List of the following values: `administrators`, `users`, `guests`, `powerusers`, `remotedesktopusers`, `remotemanagementusers`")] String LocalGroups[];
    [Write, Description("The members to add / remove to / from the group. For AzureAD Users, use the format `AzureAD\\<UserPrincipalName>`. For groups, use the security identifier (SID).")] String Members[];
    [Write, Description("The type of the selection. Either users / groups from AzureAD, or by manual identifier."), ValueMap{"users", "manual"}, Values{"users", "manual"}] String UserSelectionType;
};
 
[ClassVersion("1.0.0.0"), FriendlyName("IntuneAccountProtectionLocalUserGroupMembershipPolicy")]
class MSFT_IntuneAccountProtectionLocalUserGroupMembershipPolicy : OMI_BaseResource
{
    [Key, Description("Identity of the account protection policy.")] String Identity;
    [Required, Description("Display name of the account protection rules policy.")] String DisplayName;
    [Write, Description("Description of the account protection rules policy.")] String Description;
    [Write, Description("Assignments of the Intune Policy."), EmbeddedInstance("MSFT_IntuneAccountProtectionLocalUserGroupMembershipPolicyAssignments")] String Assignments[];
    [Write, Description("Local User Group Collections of the Intune Policy."), EmbeddedInstance("MSFT_IntuneAccountProtectionLocalUserGroupCollection")] String LocalUserGroupCollection[];
    [Write, Description("Present ensures the site collection exists, absent ensures it is removed"), ValueMap{"Present", "Absent"}, Values{"Present", "Absent"}] string Ensure;
    [Write, Description("Credentials of the Intune Admin"), EmbeddedInstance("MSFT_Credential")] string Credential;
    [Write, Description("Id of the Azure Active Directory application to authenticate with.")] String ApplicationId;
    [Write, Description("Name of the Azure Active Directory tenant used for authentication. Format contoso.onmicrosoft.com")] String TenantId;
    [Write, Description("Secret of the Azure Active Directory tenant used for authentication."), EmbeddedInstance("MSFT_Credential")] String ApplicationSecret;
    [Write, Description("Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication.")] String CertificateThumbprint;
    [Write, Description("Managed ID being used for authentication.")] Boolean ManagedIdentity;
};