Skip to content

[pull] master from KelvinTegelaar:master#34

Open
pull[bot] wants to merge 599 commits into
James-Tarran:masterfrom
KelvinTegelaar:master
Open

[pull] master from KelvinTegelaar:master#34
pull[bot] wants to merge 599 commits into
James-Tarran:masterfrom
KelvinTegelaar:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Apr 10, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot locked and limited conversation to collaborators Apr 10, 2026
@pull pull Bot added ⤵️ pull merge-conflict Resolve conflicts manually labels Apr 10, 2026
Zacgoose and others added 27 commits April 21, 2026 13:19
capped bobbly tables connections to 30 TCP connections, else override with env var AZBOBBY_MAX_CONNECTIONS_PER_SERVER
Add a granular mode (query param 'granular=true') to Invoke-ListTenantAlignment that flattens ComparisonDetails into one row per tenant+standard and resolves template display names. The change builds a GUID->displayName lookup from the 'templates' table (for Intune, ConditionalAccess, and Quarantine partitions), decodes hex RowKey values for QuarantineTemplate entries, and maps template types to friendly names. Existing non-granular output is preserved. Uses Get-CIPPTenantAlignment, Get-CippTable and Get-CIPPAzDataTableEntity and includes fallbacks when JSON parsing or lookup fails.

fixes KelvinTegelaar/CIPP#5894
Greatly reduces EXO calls to stop function timeouts and reduce TCP connection use
Previously only direct role-assigned user principals were considered when excluding admins from the PowerShell disable check. This change fetches roleAssignments, separates user and group principals, queries group members (transitive user members) via a bulk Graph v1.0 request, and merges unique userPrincipalNames from both sources. This ensures members of admin groups are treated as admins and aren't incorrectly targeted for Remote PowerShell disablement.
JohnDuprey and others added 30 commits May 8, 2026 00:08
**Important:** This PR is dependant on
CyberDrain/DNSHealth#26 being merged and the
module updated in CIPP

Implement AutoDiscover record validation in the domain analysis process
and enhance the domain health listing functionality to support
AutoDiscover record retrieval.

Frontend PR: KelvinTegelaar/CIPP#5974
…#2041)

## Summary
- Adds optional `usageLocation` (ISO 3166-1 alpha-2) to JIT Admin user
creation via Graph API
- Saves `defaultUsageLocation` in JIT Admin templates (both Add and
Edit)
- Prevents Huntress false-positive alerts for JIT Admin accounts missing
usage location

Fixes KelvinTegelaar/CIPP#5910

Companion PR (frontend):
KelvinTegelaar/CIPP#5971

## Changes
- `Set-CIPPUserJITAdmin.ps1` — conditionally includes `usageLocation` in
the Graph POST body when creating users
- `Invoke-ExecJITAdmin.ps1` — passes `usageLocation` from request body
to the User hashtable
- `Invoke-AddJITAdminTemplate.ps1` — saves `defaultUsageLocation` in
template object
- `Invoke-EditJITAdminTemplate.ps1` — same for template editing
- Updated Set-CIPPManager and Set-CIPPSponsor functions to accept multiple users for bulk processing.
- Modified Invoke-EditUser and Invoke-PatchUser to handle bulk updates for managers and sponsors.
- Enhanced logging for success and error messages during updates.
The autocomplete component sends {label, value} objects but the
Graph API expects a plain string for usageLocation. Extract .value
before passing to API, matching the pattern used by other user
endpoints (Invoke-AddUserDefaults, Invoke-EditUser, etc).
The usageLocation autocomplete sends {label, value} objects but Graph
API
expects a plain string. This causes a "StartObject node found for
usageLocation, PrimitiveValue expected" error when creating JIT Admin
users.

Extract .value before passing to the API, same as Invoke-AddUserDefaults
and Invoke-EditUser already do.
Enable bulk processing for setting multiple managers and sponsors in
user updates.
Introduce 'manager' and 'sponsor' properties to the user patching
functionality.

Frontend PR: KelvinTegelaar/CIPP#5976
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

⤵️ pull merge-conflict Resolve conflicts manually

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants