RealmJoin.psd1

@{
    RootModule        = 'RealmJoin.psm1'
    ModuleVersion     = '2.2.0'
    GUID              = 'ab4cd0b9-3080-40c6-8e34-46d7c880e58c'
    Author            = 'glueckkanja'
    CompanyName       = 'glueckkanja AG'
    Copyright         = '(c) 2025 glueckkanja AG. All rights reserved.'
    Description       = 'PowerShell module for managing RealmJoin (https://www.realmjoin.com/) tenant.'
    PowerShellVersion = '5.1'
    RequiredModules   = @(
        @{ModuleName = 'Az.Accounts'; RequiredVersion = '5.5.2' },
        @{ModuleName = 'Az.Resources'; RequiredVersion = '10.1.0' },
        @{ModuleName = 'Az.Automation'; RequiredVersion = '1.12.1' }
    )

    FunctionsToExport = @(
        'New-RJTenant',
        'Update-RJTenant',
        'Show-RJFeatureInfo',
        'Show-RJInteractiveSetup',
        'Set-RJLogAnalyticsWorkspace',
        'Set-RJAutomationAccount',
        'Grant-RJUpdateComplianceWorkspaceAccess',
        'Set-RJUseStagingEndpoint'
    )
    CmdletsToExport   = @()

    VariablesToExport = '*'

    AliasesToExport   = @('Complete-RJTenantOnboarding')

    FileList          = @( 'RealmJoin.psm1' )

    PrivateData       = @{
        PSData = @{
            Tags       = @('RealmJoin', 'Configuration', 'RJTenant', 'RJ')
            LicenseUri = 'https://raw.githubusercontent.com/realmjoin/realmjoin-psmodule/main/LICENSE'
            ProjectUri = 'https://www.realmjoin.com/'
            IconUri    = 'https://raw.githubusercontent.com/realmjoin/realmjoin-psmodule/main/realmjoin-icon.png'
            ReleaseNotes = @'
- Set-RJAutomationAccount now assigns the Automation Account managed identity the Entra ID directory roles the RealmJoin runbooks need, in addition to the API permissions; the signed-in account needs the Privileged Role Administrator or Global Administrator role, and -WhatIf reports the roles to be assigned
- Set-RJAutomationAccount downloads the permission and directory role lists from the runbooks repository on every run; new parameters -RunbookBranch, -PermissionsManifestUrl and -DirectoryRolesManifestUrl select another branch or manifest location
- Set-RJAutomationAccount and Set-RJLogAnalyticsWorkspace skip the service principal deployment when the RealmJoin Azure Resources service principal already exists, so read access to it is sufficient after the first run in a tenant
- Set-RJLogAnalyticsWorkspace deploys an existing workspace in its current region, so a workspace in a region different from its resource group no longer fails with InvalidResourceLocation
- -WhatIf no longer skips the Azure tenant/subscription switch, so the preview runs against the selected context and -SubscriptionId works under -WhatIf
'@

        }
    }
    HelpInfoURI       = 'https://docs.realmjoin.com/'
}