monkey365

0.95.1

core/api/EntraID/msgraph/helpers/serviceprincipals/New-MonkeyAADServicePrincipalPermissionObject.ps1

                                # Monkey365 - the PowerShell Cloud Security Tool for Azure and Microsoft 365 (copyright 2022) by Juan Garrido

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

#     http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

Function New-MonkeyAADServicePrincipalPermissionObject {

<#

        .SYNOPSIS

        Create a new Azure AD service principal permission object

        .DESCRIPTION

        Create a new Azure AD service principal permission object

        .INPUTS

        .OUTPUTS

        .EXAMPLE

        .NOTES

            Author        : Juan Garrido

            Twitter        : @tr1ana

            File Name    : New-MonkeyAADServicePrincipalPermissionObject

            Version     : 1.0

        .LINK

            https://github.com/silverhack/monkey365

    #>

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute("PSUseShouldProcessForStateChangingFunctions", "", Scope="Function")]

    [CmdletBinding()]

    Param (

        [Parameter(Mandatory=$true, ValueFromPipeline = $True)]

        [Object]$ServicePrincipal

    )

    Process{

        try{

            #Create ordered dictionary

            $new_permission = [ordered]@{

                ApplicationDisplayName = $ServicePrincipal.displayName;

                ApplicationId = $ServicePrincipal.appId;

                ApplicationObjectId = $ServicePrincipal.id;

                ResourceObjectId = $null;

                ResourceDisplayName = $null;

                PrincipalObjectId = $null;

                PrincipalDisplayName = $null;

                PrincipalUPN = $null;

                PermissionId = $null;

                PermissionName = $null;

                PermissionDisplayName = $null;

                PermissionDescription = $null;

                ConsentType = $null;

            }

            #Create PsObject

            $perm_obj = New-Object -TypeName PsObject -Property $new_permission

            #return object

            return $perm_obj

        }

        catch{

            $msg = @{

                MessageData = ($message.AADAppPermissionObjectError -f $ServicePrincipal.displayName);

                callStack = (Get-PSCallStack | Select-Object -First 1);

                logLevel = 'error';

                InformationAction = $O365Object.InformationAction;

                Tags = @('AADServicePrincipalPermissionObjectError');

            }

            Write-Error @msg

            $msg.MessageData = $_

            $msg.LogLevel = "Verbose"

            $msg.Tags+= "AADServicePrincipalPermissionObjectError"

            [void]$msg.Add('verbose',$O365Object.verbose)

            Write-Verbose @msg

        }

    }

}