Omnicit.PIM

0.7.2-preview0002

Omnicit.PIM.psd1

                                #

# Module manifest for module 'Omnicit.PIM'

#

# Generated by: Omnicit

#

# Generated on: 2026-03-25

#

@{

# Script module or binary module file associated with this manifest.

RootModule = 'Omnicit.PIM.psm1'

# Version number of this module.

ModuleVersion = '0.7.2'

# Supported PSEditions

CompatiblePSEditions = @('Core')

# ID used to uniquely identify this module

GUID = 'ed16ca8d-c9c0-4987-90b9-749edc96ebb8'

# Author of this module

    Author = 'Omnicit (originally by Justin Grote @justinwgrote)'

# Company or vendor of this module

CompanyName = 'Omnicit'

# Copyright statement for this module

Copyright = '(c) Omnicit. All rights reserved.'

# Description of the functionality provided by this module

Description = 'Entra ID Privileged Identity Management (PIM) Self Activation Commands for Directory Roles, Azure Resources, and Entra ID Groups'

# Minimum version of the PowerShell engine required by this module

PowerShellVersion = '7.4'

# Name of the PowerShell host required by this module

# PowerShellHostName = ''

# Minimum version of the PowerShell host required by this module

# PowerShellHostVersion = ''

# Minimum version of Microsoft .NET Framework required by this module. This prerequisite is valid for the PowerShell Desktop edition only.

# DotNetFrameworkVersion = ''

# Minimum version of the common language runtime (CLR) required by this module. This prerequisite is valid for the PowerShell Desktop edition only.

# ClrVersion = ''

# Processor architecture (None, X86, Amd64) required by this module

# ProcessorArchitecture = ''

# Modules that must be imported into the global environment prior to importing this module

    RequiredModules  = @(

        @{ ModuleName = 'Microsoft.Graph.Authentication'; ModuleVersion = '2.36.0' }

        @{ ModuleName = 'AzAuth'; ModuleVersion = '2.11.0' }

    )

# Assemblies that must be loaded prior to importing this module

# RequiredAssemblies = @()

# Script files (.ps1) that are run in the caller's environment prior to importing this module.

# ScriptsToProcess = @()

# Type files (.ps1xml) to be loaded when importing this module

    # Disabled: TypesToProcess re-registers type members on every Import-Module -Force but Remove-Module does NOT

    # clean type data, so the second test file import fails with "member is already present" errors.

    # Types are loaded via a single Update-TypeData -AppendPath call in the psm1 suffix instead.

    TypesToProcess = @()

# Format files (.ps1xml) to be loaded when importing this module

    # Re-enabled: all format targets are Omnicit.PIM.* custom types (no Az-native type overrides), so

    # the AppendPath precedence issue with Az.Resources no longer applies.

    # The orphaned RoleAssignmentScheduleRequest override was removed because all Azure functions now

    # wrap output with Omnicit.PIM.AzureAssignmentScheduleRequest before returning.

    FormatsToProcess = @('Formats/Omnicit.PIM.Format.ps1xml')

# Modules to import as nested modules of the module specified in RootModule/ModuleToProcess

# NestedModules = @()

# Functions to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no functions to export.

FunctionsToExport = @('Connect-OPIM','Disable-OPIMAzureRole','Disable-OPIMDirectoryRole','Disable-OPIMEntraIDGroup','Disable-OPIMMyRole','Disconnect-OPIM','Enable-OPIMAzureRole','Enable-OPIMDirectoryRole','Enable-OPIMEntraIDGroup','Enable-OPIMMyRole','Get-OPIMAzureRole','Get-OPIMConfiguration','Get-OPIMDirectoryRole','Get-OPIMEntraIDGroup','Install-OPIMConfiguration','Remove-OPIMConfiguration','Set-OPIMConfiguration','Wait-OPIMDirectoryRole')

# Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.

CmdletsToExport = @()

# Variables to export from this module

VariablesToExport = @()

# Aliases to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no aliases to export.

AliasesToExport = @('Connect-PIM','Disable-OPIMMyRoles','Disable-PIMADRole','Disable-PIMGroup','Disable-PIMResourceRole','Disable-PIMRole','Disconnect-PIM','Enable-OPIMMyRoles','Enable-PIMADRole','Enable-PIMGroup','Enable-PIMResourceRole','Enable-PIMRole','Get-PIMADRole','Get-PIMConfig','Get-PIMGroup','Get-PIMResourceRole','Get-PIMRole','pim','Remove-PIMConfig','unpim','Set-PIMConfig','Wait-PIMADRole','Wait-PIMRole')

# DSC resources to export from this module

DscResourcesToExport = @()

# List of all modules packaged with this module

# ModuleList = @()

# List of all files packaged with this module

# FileList = @()

# Private data to pass to the module specified in RootModule/ModuleToProcess. This may also contain a PSData hashtable with additional module metadata used by PowerShell.

PrivateData = @{

    PSData = @{

        # Tags applied to this module. These help with module discovery in online galleries.

            Tags       = @('PIM', 'Azure', 'EntraID', 'Identity', 'Privileged', 'Windows', 'MacOS', 'Linux')

        # A URL to the license for this module.

            LicenseUri = 'https://github.com/Omnicit/Omnicit.PIM/LICENSE'

        # A URL to the main website for this project.

            ProjectUri = 'https://github.com/Omnicit/Omnicit.PIM'

        # A URL to an icon representing this module.

            IconUri = 'https://raw.githubusercontent.com/Omnicit/Omnicit.PIM/main/assets/icon.png'

        # ReleaseNotes of this module

        ReleaseNotes = '## [0.7.2-preview0002] - 2026-10-28

The sign-in fixes that Omnicit.EntraRBAC published after 0.7.1, and AzAuth 2.11.0 or later is now

required.

- A session signed in through the system browser is renewed without a prompt when a command starts

  near the token''s expiry, where AzAuth can answer from the sign-in it already holds: for the same

  account and tenant only, and otherwise the browser opens once, as before. A session that signs in

  to both Microsoft Graph and Azure, and a token that Microsoft Graph or Azure rejects, still sign in

  again. This is read from AzAuth''s source, not yet measured against a tenant, and it means fewer

  prompts, not none. Device code sessions are unchanged.

- A new sign-in that continues the session -- a renewal, a sign-in after a rejected token or an ACRS

  step-up -- answered by another account than the one the session signed in with is refused with

  `AccountMismatch`. The token is not used and the session stays the account it was; run

  `Disconnect-OPIM` first to sign in as another account. Before, the session quietly continued as

  the account picked in the browser.

- In a PowerShell started with `pwsh -NonInteractive` a sign-in in the system browser is refused with

  the new `InteractiveSignInUnavailable` before any token is requested, instead of waiting for a

  browser. Use `-DeviceCode` there.

- A Microsoft Graph or Azure listing that cannot be read to its end is an error, never a shorter

  list: a later Graph page that carries no list at all, a Graph next link back to a page already read and a listing past

  100000 pages are now refused as well. A claims challenge is stepped up only while the module holds

  a sign-in.

'

        # Prerelease string of this module

        Prerelease =  'preview0002'

        # Flag to indicate whether the module requires explicit user acceptance for install/update/save

        # RequireLicenseAcceptance = $false

        # External dependent modules of this module

        # ExternalModuleDependencies = @()

    } # End of PSData hashtable

} # End of PrivateData hashtable

# HelpInfo URI of this module

# HelpInfoURI = ''

# Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix.

# DefaultCommandPrefix = ''

}