Azure/New-AzDevOpsSecurityGroup.ps1 at master · Hoppy7/Azure · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
param
(
    [Parameter(mandatory = $true)]
    [string]$azDevOpsOrgUrl,

    [Parameter(mandatory = $true)]
    [string]$azDevOpsProject,

    [Parameter(mandatory = $true)]
    [string]$azDevOpsPAT,

    [Parameter(mandatory = $true)]
    [string]$securityGroupName,

    [Parameter(mandatory = $true)]
    [string]$securityGroupDescription,

    [Parameter(mandatory = $false)]
    [array]$memberArray
)

function New-AzDevOpsSecurityGroup
{
    [CmdletBinding()]
    param
    (
        [Parameter(mandatory = $true)]
        [string]$azDevOpsOrgUrl,

        [Parameter(mandatory = $true)]
        [string]$azDevOpsProject,

        [Parameter(mandatory = $true)]
        [string]$azDevOpsPAT,

        [Parameter(mandatory = $true)]
        [string]$securityGroupName,

        [Parameter(mandatory = $true)]
        [string]$securityGroupDescription,

        [Parameter(mandatory = $false)]
        [array]$memberArray
    )

    # auth with pat token
    $env:AZURE_DEVOPS_EXT_PAT = $azDevOpsPAT;
    az devops configure --defaults organization=$azDevOpsOrgUrl;
    if (!$?)
    {
        throw "Error setting az devops config!";
    }

    $newSecurityGroup = az devops security group create --name $securityGroupName --project $azDevOpsProject --description $securityGroupDescription --output json;
    if (!$newSecurityGroup)
    {
        throw "Failed to create security group!";
    }

    Write-Output "Security group successfully created:";
    Write-Output $newSecurityGroup;

    if ($memberArray)
    {
        $newSecurityGroup = $newSecurityGroup | ConvertFrom-Json;

        $addedMembers = @();

        foreach ($member in $memberArray)
        {
            $thisMember = az devops security group membership add --group-id $newSecurityGroup.descriptor --member-id $member --output json;

            if ($thisMember)
            {
                $addedMembers += $($thisMember | ConvertFrom-Json);
            }
            else
            {
                Write-Error -Message "Failed to add $member to the $securityGroupName security group!" -ErrorAction Continue;
            }
        }

        Write-Output "Members successfully added:";
        Write-Output $($addedMembers | ConvertTo-Json -Depth 10);
    }
}

if (!$memberArray)
{
    # create security group
    $newSG = @{
        azDevOpsOrgUrl           = $azDevOpsOrgUrl;
        azDevOpsProject          = $azDevOpsProject;
        azDevOpsPAT              = $azDevOpsPAT;
        securityGroupName        = $securityGroupName;
        securityGroupDescription = $securityGroupDescription;
    };
}
else
{
    # create security group and add members
    $newSG = @{
        azDevOpsOrgUrl           = $azDevOpsOrgUrl;
        azDevOpsProject          = $azDevOpsProject;
        azDevOpsPAT              = $azDevOpsPAT;
        securityGroupName        = $securityGroupName;
        securityGroupDescription = $securityGroupDescription;
        memberArray              = $memberArray;
    };
}

New-AzDevOpsSecurityGroup @newSG;