Skip to content

Commit 3984fa5

Browse files
committed
Improve detail view
1 parent e164e2b commit 3984fa5

2 files changed

Lines changed: 2 additions & 13 deletions

File tree

modules/check_AgentIdentityBlueprintsPrincipals.psm1

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ function Invoke-AgentIdentityBlueprintsPrincipals {
5151
write-host "[*] Get Agent Identity Blueprint Principals"
5252
$QueryParameters = @{
5353
'$filter' = "ServicePrincipalType eq 'Application'"
54-
'$select' = "Id,DisplayName,PublisherName,appRoles,accountEnabled,AppId,servicePrincipalType,createdDateTime,signInAudience,AppOwnerOrganizationId,AppRoleAssignmentRequired,preferredSingleSignOnMode"
54+
'$select' = "Id,DisplayName,PublisherName,appRoles,accountEnabled,AppId,servicePrincipalType,createdDateTime,signInAudience,AppOwnerOrganizationId,AppRoleAssignmentRequired"
5555
'$top' = $ApiTop
5656
}
5757
$AgentIdentityBlueprintPrincipals = Send-GraphRequest -AccessToken $GLOBALMsGraphAccessToken.access_token -Method GET -Uri '/servicePrincipals/graph.agentIdentityBlueprintPrincipal' -QueryParameters $QueryParameters -BetaAPI -UserAgent $($GlobalAuditSummary.UserAgent.Name)
@@ -775,7 +775,6 @@ function Invoke-AgentIdentityBlueprintsPrincipals {
775775
LinkedAgentIdentities = ($LinkedAgentIdentities | Measure-Object).Count
776776
LinkedAgentIdentitiesDetails = $LinkedAgentIdentities
777777
AppRoleRequired = $item.AppRoleAssignmentRequired
778-
SAML = ($item.preferredSingleSignOnMode -eq "saml")
779778
AppApiPermission = $AppApiPermission
780779
AppRoles = ($MatchingAppRoles | Measure-Object).count
781780
AppRolesDetails = $MatchingAppRoles

modules/check_AgentsFinalize.psm1

Lines changed: 1 addition & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1599,7 +1599,6 @@ Appendix: Used API Permission Reference
15991599
"MS Default" = $item.DefaultMS
16001600
"Foreign" = $item.Foreign
16011601
"Require AppRole" = $item.AppRoleRequired
1602-
"SAML" = $item.SAML
16031602
"Child Agent Identities" = $item.LinkedAgentIdentities
16041603
"Child Agent Users" = $item.AgentUsers
16051604
"DirectImpact" = $item.DirectImpact
@@ -1756,7 +1755,7 @@ Appendix: Used API Permission Reference
17561755
$BlueprintItems = @($AgentIdentityBlueprints.Values | Sort-Object Risk -Descending)
17571756
foreach ($item in $BlueprintItems) {
17581757
[void]$BlueprintTxt.AppendLine("############################################################################################################################################")
1759-
[void]$BlueprintTxt.AppendLine(($item | Select-Object DisplayName,AppId,@{Name = 'Child Blueprint Principals'; Expression = { $_.BlueprintPrincipals }},@{Name = 'Child Agent Identities'; Expression = { $_.LinkedAgentIdentities }},@{Name = 'Child Agent Users'; Expression = { $_.AgentUsers }},InhScopes,InhRoles,DirectImpact,InheritedImpact,Impact,Likelihood,Risk,Warnings | Out-String))
1758+
[void]$BlueprintTxt.AppendLine(($item | Select-Object DisplayName,AppId,@{Name = 'Child Blueprint Principals'; Expression = { $_.BlueprintPrincipals }},@{Name = 'Child Agent Identities'; Expression = { $_.LinkedAgentIdentities }},@{Name = 'Child Agent Users'; Expression = { $_.AgentUsers }},Impact,Likelihood,Risk,Warnings | Out-String))
17601759
if (($item.BlueprintPrincipalsDetails | Measure-Object).Count -ge 1) {
17611760
[void]$BlueprintTxt.AppendLine("Child Blueprint Principals")
17621761
[void]$BlueprintTxt.AppendLine(($item.BlueprintPrincipalsDetails | Select-Object DisplayName,@{Name = 'Child Agent Identities'; Expression = { $_.LinkedAgentIdentities }},@{Name = 'Child Agent Users'; Expression = { $_.AgentUsers }},Impact,Warnings | Format-Table | Out-String))
@@ -1787,15 +1786,6 @@ Appendix: Used API Permission Reference
17871786
"Child Blueprint Principals" = $item.BlueprintPrincipals
17881787
"Child Agent Identities" = $item.LinkedAgentIdentities
17891788
"Child Agent Users" = $item.AgentUsers
1790-
"Sponsors" = $item.Sponsors
1791-
"InhScopes" = $item.InhScopes
1792-
"InhRoles" = $item.InhRoles
1793-
"FederatedCreds" = $item.FederatedCreds
1794-
"Oauth2PermissionScopes" = $item.Oauth2PermissionScopes
1795-
"SecretsCount" = $item.SecretsCount
1796-
"CertsCount" = $item.CertsCount
1797-
"DirectImpact" = $item.DirectImpact
1798-
"InheritedImpact" = $item.InheritedImpact
17991789
"RiskScore" = $item.Risk
18001790
"Warnings" = $item.Warnings
18011791
}

0 commit comments

Comments
 (0)