AccessPackages.ps1

# This file contains functions for accessing access packages

# Gets access packages
# Apr 24 2023
function Get-AccessPackages
{
<#
    .SYNOPSIS
    Returns access packages.

    .DESCRIPTION
    Returns access packages.

    .Parameter AccessToken
    Access token for the target tenant.
    
    .Example
    PS C:\>Get-AADIntAccessTokenForAccessPackages -Tenant company.com -SaveToCache
    PS C:\>Get-AADIntAccessPackages

    id                                     : df9513b4-1686-4434-8c37-cbfaeea51b69
    catalogId                              : 755780b3-9228-4cf6-8919-732c6f0ff026
    displayName                            : Visitors
    description                            : Access package for Visitors
    isHidden                               : False
    isRoleScopesVisible                    : False
    createdBy                              : johnd@company.com
    createdByString                        : johnd@company.com
    createdDateTime                        : 2022-01-02T10:20:44.247Z
    modifiedBy                             : johnd@company.com
    lastModifiedByString                   : johnd@company.com
    modifiedDateTime                       : 2022-01-02T10:20:44.247Z
    lastModifiedDateTime                   : 2022-01-02T10:20:44.247Z
    lastCriticalModificationDateTime       : 
    lastSuccessfulChangeEvaluationDateTime :

#>
    [cmdletbinding()]
    Param(
        [Parameter(Mandatory=$False)]
        [string]$AccessToken
    )
    Process
    {
        # Get from cache if not provided
        $AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -Resource "https://elm.iga.azure.com" -ClientId "d3590ed6-52b3-4102-aeff-aad2292ab01c"

        # Get access packages
        try
        {
            $response = Invoke-RestMethod -UseBasicParsing -Method Get -Uri "https://elm.iga.azure.com/api/v1/accessPackages/Search()?`$count=true&`$top=999" -Headers @{"Authorization" = "Bearer $AccessToken"}
        }
        catch{}

        return $response.Value
    }
}

# Gets access package catalogs
# Apr 24 2023
function Get-AccessPackageCatalogs
{
<#
    .SYNOPSIS
    Returns access package catalogs.

    .DESCRIPTION
    Returns access package catalogs.

    .Parameter AccessToken
    Access token for the target tenant.
    
    .Example
    PS C:\>Get-AADIntAccessTokenForAccessPackages -Tenant company.com -SaveToCache
    PS C:\>Get-AADIntAccessPackageCatalogs

    id                   : 755780b3-9228-4cf6-8919-732c6f0ff026
    displayName          : Visitors
    description          : Catalog for visitors
    catalogType          : UserManaged
    catalogStatus        : Published
    state                : published
    isExternallyVisible  : True
    createdBy            : johnd@company.com
    createdByString      : johnd@company.com
    createdDateTime      : 2022-01-02T10:20:44.247Z
    modifiedBy           : johnd@company.com
    lastModifiedByString : johnd@company.com
    modifiedDateTime     : 2022-01-02T10:20:44.247Z
    lastModifiedDateTime : 2022-01-02T10:20:44.247Z
#>
    [cmdletbinding()]
    Param(
        [Parameter(Mandatory=$False)]
        [string]$AccessToken
    )
    Process
    {
        # Get from cache if not provided
        $AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -Resource "https://elm.iga.azure.com" -ClientId "d3590ed6-52b3-4102-aeff-aad2292ab01c"

        # Get access packages
        try
        {
            $response = Invoke-RestMethod -UseBasicParsing -Method Get -Uri "https://elm.iga.azure.com/api/v1/accessPackageCatalogs/Search()?`$count=true&`$top=999" -Headers @{"Authorization" = "Bearer $AccessToken"}
        }
        catch{}

        return $response.Value
    }
}



# Returns access package creators & modifiers
# Apr 24th 2023
function Get-AccessPackageAdmins
{
<#
    .SYNOPSIS
    Returns access packages administrators.

    .DESCRIPTION
    Returns administrators from access package and access package catalog createdBy and modifiedBy fields.

    The returned administrators are Global Administrators, User Administrators (until May 5 2023), or Identity Governance Administrators (since May 2023).

    .Parameter AccessToken
    Access token for the target tenant.
    
    .Example
    PS C:\>Get-AADIntAccessTokenForAccessPackages -Tenant company.com -SaveToCache
    PS C:\>Get-AADIntAccessPackageAdmins

    Acheaduncompany.com
    Alexaneoscompany.com
    Andownlocompany.com
    Anselowslcompany.com
    Babergencompany.com
    Bethportcompany.com
    Brangelocompany.com
    Caranteecompany.com
    Chmenscompany.com
    Conneytrcompany.com
    Crofficompany.com
    Diumficompany.com
    Downtichocompany.com
    Getacewedcompany.com

#>
    [cmdletbinding()]
    Param(
        [Parameter(Mandatory=$False)]
        [String]$AccessToken
    )
    Process
    {
        # Get token for access packages
        $AccessToken = Get-AccessTokenFromCache -AccessToken $AccessToken -ClientID "d3590ed6-52b3-4102-aeff-aad2292ab01c" -Resource "https://elm.iga.azure.com"

        # Get access packages and catalogs
        $accessPackages        = Get-AccessPackages        -AccessToken $AccessToken
        $accessPackageCatalogs = Get-AccessPackageCatalogs -AccessToken $AccessToken

        # Get names
        $names = @()
        $accesspackageCatalogs | Select -ExpandProperty "createdBy"  | %{ $names += $_}
        $accesspackageCatalogs | Select -ExpandProperty "modifiedBy" | %{ $names += $_}
        $accesspackages        | Select -ExpandProperty "createdBy"  | %{ $names += $_}
        $accesspackages        | Select -ExpandProperty "modifiedBy" | %{ $names += $_}

        # Return unique usernames with upn
        $names | Select-String -Pattern "@" | Sort-Object | Get-Unique 
    }
}