-
Notifications
You must be signed in to change notification settings - Fork 207
/
Copy pathAdd-MsOMembersToGroups.ps1
187 lines (173 loc) · 6.63 KB
/
Add-MsOMembersToGroups.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
#Requires -Version 5.0
#Requires -Modules MSOnline
<#
.SYNOPSIS
Connect to MS Online and adds members to Azure Active Directory group
.DESCRIPTION
.NOTES
This PowerShell script was developed and optimized for ScriptRunner. The use of the scripts requires ScriptRunner.
The customer or user is authorized to copy the script from the repository and use them in ScriptRunner.
The terms of use for ScriptRunner do not apply to this script. In particular, ScriptRunner Software GmbH assumes no liability for the function,
the use and the consequences of the use of this freely available script.
PowerShell is a product of Microsoft Corporation. ScriptRunner is a product of ScriptRunner Software GmbH.
© ScriptRunner Software GmbH
.COMPONENT
Azure Active Directory Powershell Module
.LINK
https://github.com/scriptrunner/ActionPacks/tree/master/O365/MSOnline/Groups
.Parameter TargetGroupNames
[sr-en] Display names of the groups to which to add members
.Parameter GroupNames
[sr-en] Display names of the groups to add to the target groups
.Parameter UserNames
[sr-en] Sign-In names, display names or user principal names of the users to add to the target groups
.Parameter GroupObjectIds
[sr-en] Unique IDs of the groups to which to add members
.Parameter GroupIds
[sr-en] Unique object IDs of the groups to add to the groups
.Parameter UserIds
[sr-en] Unique object IDs of the users to add to the groups
.Parameter TenantId
[sr-en] Unique ID of the tenant on which to perform the operation
#>
param(
[Parameter(Mandatory = $true,ParameterSetName = "Names")]
[string[]]$TargetGroupNames,
[Parameter(ParameterSetName = "Names")]
[string[]]$UserNames,
[Parameter(ParameterSetName = "Names")]
[string[]]$GroupNames,
[Parameter(Mandatory = $true,ParameterSetName = "IDs")]
[guid[]]$GroupObjectIds,
[Parameter(ParameterSetName = "IDs")]
[guid[]]$GroupIds,
[Parameter(ParameterSetName = "IDs")]
[guid[]]$UserIds,
[Parameter(ParameterSetName = "Names")]
[Parameter(ParameterSetName = "IDs")]
[guid]$TenantId
)
try{
$Script:result = @()
$Script:err =$false
if($PSCmdlet.ParameterSetName -eq "Names"){
$GroupObjectIds=@()
$tmp
foreach($itm in $TargetGroupNames){
try{
$tmp = Get-MsolGroup -TenantId $TenantId | Where-Object -Property DisplayName -eq $itm
$GroupObjectIds += $tmp.ObjectID
}
catch{
$Script:result += "Error: Target group $($itm) not found "
$Script:err = $true
continue
}
}
if($null -ne $UserNames){
$UserIds=@()
foreach($itm in $UserNames){
try{
$tmp = Get-MsolUser -TenantId $TenantId | `
Where-Object {($_.DisplayName -eq $itm) -or ($_.SignInName -eq $itm) -or ($_.UserPrincipalName -eq $itm)}
$UserIds += $tmp.ObjectID
}
catch{
$Script:result += "Error: User $($itm) not found "
$Script:err = $true
continue
}
}
}
if($null -ne $GroupNames){
$GroupIds=@()
foreach($itm in $GroupNames){
try{
$tmp = Get-MsolGroup -TenantId $TenantId | Where-Object -Property DisplayName -eq $itm
$GroupIds += $tmp.ObjectID
}
catch{
$Script:result += "Error:Group $($itm) not found"
$Script:err = $true
continue
}
}
}
}
forEach($gid in $GroupObjectIds){
try{
$grp = Get-MsolGroup -ObjectId $gid -TenantId $TenantId
}
catch{
$Script:result += "Error: GroupObjectID $($gid) $($_.Exception.Message)"
$Script:err =$true
continue
}
if($null -ne $grp){
if($null -ne $GroupIds){
$addGrp
forEach($itm in $GroupIds){
try{
$addGrp = Get-MsolGroup -ObjectId $itm -TenantId $TenantId
}
catch{
$Script:result += "Error: GroupID $($itm) $($_.Exception.Message)"
$Script:err =$true
continue
}
if($null -ne $addGrp){
try{
$null = Add-MsolGroupMember -GroupObjectId $gid -GroupMemberObjectId $itm -GroupMemberType 'Group' -TenantId $TenantId
$Script:result += "Group $($addGrp.DisplayName) added to Group $($grp.DisplayName)"
}
catch{
$Script:result += "Error: GroupID $($itm) $($_.Exception.Message)"
$Script:err =$true
continue
}
}
}
}
if($null -ne $UserIds){
$usr
forEach($itm in $UserIds){
try{
$usr = Get-MsolUser -ObjectId $itm -TenantId $TenantId
}
catch{
$Script:result += "Error: UserID $($itm) $($_.Exception.Message)"
$Script:err =$true
continue
}
if($null -ne $usr){
try{
$null = Add-MsolGroupMember -GroupObjectId $gid -GroupMemberObjectId $itm -GroupMemberType 'User' -TenantId $TenantId
$Script:result += "User $($usr.DisplayName) added to Group $($grp.DisplayName)"
}
catch{
$Script:result += "Error: UserID $($itm) $($_.Exception.Message)"
$Script:err =$true
continue
}
}
}
}
}
else {
$Script:result += "Group $($gid) not found"
$Script:err =$true
}
}
if($SRXEnv) {
$SRXEnv.ResultMessage = $Script:result
if($Script:err -eq $true){
Throw $($Script:result -join ' ')
}
}
else{
Write-Output $Script:result
}
}
catch{
throw
}