TenantLens

1.3.2

Collectors/AuthorizationPolicy.ps1

@{
    Name           = 'AuthorizationPolicy'
    FileName       = 'authorizationPolicy'
    ApiVersion     = 'v1.0'
    RequiredScopes = @('Policy.Read.All')
    Description    = 'Authorization policy (user consent, guest permissions, invites) and security defaults state.'
    Collect        = {
        $authorizationPolicy = Invoke-TLGraphRequest -Uri '/v1.0/policies/authorizationPolicy'

        $securityDefaults = $null
        try {
            $securityDefaults = Invoke-TLGraphRequest -Uri '/v1.0/policies/identitySecurityDefaultsEnforcementPolicy'
        }
        catch {
            Write-Verbose ("Security defaults policy unavailable: {0}" -f $_.Exception.Message)
        }

        @{
            authorizationPolicy = $authorizationPolicy
            securityDefaults    = $securityDefaults
        }
    }
}