Skip to content

Commit

Permalink
Added sharepoint sync test
Browse files Browse the repository at this point in the history
  • Loading branch information
Raphael Buechi committed Aug 29, 2024
1 parent 8f9d947 commit 4412fc5
Showing 1 changed file with 78 additions and 21 deletions.
99 changes: 78 additions & 21 deletions Config/AXE-TENANT.BPATemplate.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -159,7 +159,7 @@
"name": "Security Defaults Enabled",
"desc": "Check if Security Defaults are enabled. If using Conditional Access, this should be disabled.",
"value": "SecureDefaultState",
"formatter": "string"
"formatter": "bool"
}
]
},
Expand All @@ -184,36 +184,37 @@
]
},
{
"name": "OAuthAppConsent",
"name": "OAuthAppConsentDisabled",
"API": "Graph",
"URL": "https://graph.microsoft.com/v1.0/policies/authorizationPolicy?$select=defaultUserRolePermissions",
"ExtractFields": [
"defaultuserrolepermissions"
"defaultUserRolePermissions"
],
"where": "@('ManagePermissionGrantsForSelf.microsoft-user-default-legacy', 'microsoft-user-default-low') -notin $_.defaultuserrolepermissions.permissionGrantPoliciesAssigned",
"where": "@('ManagePermissionGrantsForSelf.microsoft-user-default-legacy', 'ManagePermissionGrantsForSelf.microsoft-user-default-low') -notin $_.defaultUserRolePermissions.permissionGrantPoliciesAssigned",
"StoreAs": "bool",
"FrontendFields": [
{
"name": "Enterprise App consent disabled",
"desc": "Check if users can self-service consent to apps",
"value": "OAuthAppConsent",
"value": "OAuthAppConsentDisabled",
"formatter": "bool"
}
]
},
{
"name": "AllowedToCreateTenants",
"API": "Graph",
"URL": "https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizationPolicy",
"URL": "https://graph.microsoft.com/v1.0/policies/authorizationPolicy?$select=defaultUserRolePermissions",
"ExtractFields": [
"defaultUserRolePermissions"
],
"StoreAs": "JSON",
"where": "$_.defaultUserRolePermissions.allowedToCreateTenants -eq $true",
"StoreAs": "bool",
"FrontendFields": [
{
"name": "Tenant Creation Disabled",
"desc": "Check if users are allowed to create tenants",
"value": "AllowedToCreateTenants.allowedToCreateTenants",
"value": "AllowedToCreateTenants",
"formatter": "reverseBool"
}
]
Expand All @@ -235,6 +236,29 @@
}
]
},
{
"name": "MailboxesWithBasicAuthEnabled",
"API": "Exchange",
"Command": "Get-CASMailbox",
"Parameters": {
"ResultSize": "Unlimited"
},
"where": "$_.SmtpClientAuthenticationDisabled -eq $false",
"ExtractFields": [
"DisplayName",
"PrimarySmtpAddress",
"SmtpClientAuthenticationDisabled"
],
"StoreAs": "JSON",
"FrontendFields": [
{
"name": "Mail: SMTP Basic Auth Enabled",
"desc": "Check if SMTP Basic Authentication is enabled for any mailbox",
"formatter": "table",
"value": "MailboxesWithBasicAuthEnabled"
}
]
},
{
"name": "MessageCopyforSentAsDisabled",
"API": "Exchange",
Expand All @@ -247,7 +271,8 @@
},
"where": "$_.MessageCopyForSentAsEnabled -eq $false",
"ExtractFields": [
"userprincipalname",
"DisplayName",
"PrimarySmtpAddress",
"messageCopyForSentAsEnabled"
],
"StoreAs": "JSON",
Expand Down Expand Up @@ -293,50 +318,82 @@
"isResharingByExternalUsersEnabled",
"isUnmanagedSyncAppForTenantRestricted",
"isSiteCreationEnabled",
"isSiteCreationUIEnabled",
"tenantDefaultTimezone",
"isRequireAcceptingUserToMatchInvitedUserEnabled",
"isLegacyAuthProtocolsEnabled"
],
"StoreAs": "JSON",
"FrontendFields": [
{
"name": "SPO: Resharing disabled",
"desc": "Check if resharing by external users is disabled",
"name": "Guest resharing disabled",
"desc": "Check if SharePoint resharing by external users is disabled",
"value": "SharepointSettings.isResharingByExternalUsersEnabled",
"formatter": "reverseBool"
},
{
"name": "SPO: Allow sync from unmanaged devices",
"desc": "Check if document library sync from unmanaged devices is allowed",
"name": "Disable sync from unmanaged devices",
"desc": "Check if document library sync from unmanaged devices is disabled",
"value": "SharepointSettings.isUnmanagedSyncAppForTenantRestricted",
"formatter": "reverseBool"
"formatter": "bool"
},
{
"name": "SPO: Site creation disabled",
"name": "Site creation disabled",
"desc": "Check if SharePoint site creation is disabled for all users",
"value": "SharepointSettings.isSiteCreationEnabled",
"formatter": "reverseBool"
},
{
"name": "SPO: Default Timezone",
"name": "Site creation UI disabled",
"desc": "Check if SharePoint site creation UI is disabled for all users",
"value": "SharepointSettings.isSiteCreationUIEnabled",
"formatter": "reverseBool"
},
{
"name": "Default SharePoint timezone",
"desc": "Check the default timezone for SharePoint sites",
"value": "SharepointSettings.tenantDefaultTimezone",
"formatter": "string"
},
{
"name": "SPO: Require accepting user to match invited user",
"name": "Require accepting user to match invited user",
"desc": "Check if users are required to accept the invitation to match the invited user",
"value": "SharepointSettings.isRequireAcceptingUserToMatchInvitedUserEnabled",
"formatter": "bool"
},
{
"name": "SPO: Legacy Auth Protocols Disabled",
"name": "Legacy SharePoint auth protocols disabled",
"desc": "Check if legacy authentication protocols are disabled",
"value": "SharepointSettings.isLegacyAuthProtocolsEnabled",
"formatter": "reverseBool"
}
]
},
{
"name": "SharePointSyncSettings",
"API": "CIPPFunction",
"Command": "Get-CIPPSPOTenant",
"Parameters": {},
"ExtractFields": [
"OneDriveAddShortcutButtonDisabled",
"HideSyncButtonOnDocLib"
],
"StoreAs": "JSON",
"FrontendFields": [
{
"name": "Add shortcut button disabled",
"desc": "Check if the 'Add shortcut' button is disabled for OneDrive",
"value": "SharePointSyncSettings.OneDriveAddShortcutButtonDisabled",
"formatter": "bool"
},
{
"name": "Sync button shown",
"desc": "Check if the Sync button is shown for document libraries",
"value": "SharePointSyncSettings.HideSyncButtonOnDocLib",
"formatter": "reverseBool"
}
]
},
{
"name": "SharepointAnonymousSharingEnabled",
"API": "Graph",
Expand All @@ -351,7 +408,7 @@
"StoreAs": "bool",
"FrontendFields": [
{
"name": "SPO: Anonymous Sharing disabled",
"name": "Anonymous link sharing disabled",
"desc": "Check if anonymous sharing is disabled for SharePoint and OneDrive",
"value": "SharepointAnonymousSharingEnabled",
"formatter": "reverseBool"
Expand All @@ -361,7 +418,7 @@
{
"name": "LAPSEnabled",
"API": "Graph",
"URL": "https://graph.microsoft.com/beta/policies/deviceRegistrationPolicy",
"URL": "https://graph.microsoft.com/v1.0/policies/deviceRegistrationPolicy?$select=localAdminPassword",
"ExtractFields": [
"localAdminPassword"
],
Expand All @@ -378,7 +435,7 @@
{
"name": "SecurityGroupCreationAllowed",
"API": "Graph",
"URL": "https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizationPolicy",
"URL": "https://graph.microsoft.com/beta/policies/authorizationPolicy/?$select=defaultUserRolePermissions",
"ExtractFields": [
"defaultUserRolePermissions"
],
Expand Down

0 comments on commit 4412fc5

Please sign in to comment.