Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AADGroupLifecyclePolicy - AlternateNotificationEmails property mandatory #5860

Open
YenNantes opened this issue Feb 28, 2025 · 1 comment
Open

Comments

@YenNantes
Copy link

Description of the issue

Since V1.25.226.1, the AlternateNotificationEmails property from ressource AADGroupLifecyclePolicy is mandatory when using Assert-M365Blueprint.
Is it possible to make it optional like before as we do not want to audit this setting.

Microsoft 365 DSC Version

1.25.226.1

Which workloads are affected

Azure Active Directory (Entra ID)

The DSC configuration

Assert-M365DSCBlueprint -BluePrintUrl $baselinefilepath -OutputReportPath $auditfilepath -ApplicationId $ApplicationId -CertificateThumbprint $CertificateThumbprint -TenantId $TenantDomainName -Type json

Verbose logs showing the problem

Resource 'AADGroupLifecyclePolicy' requires that a value of type 'StringArray' be provided for property 'AlternateNotificationEmails'."
>> TerminatingError(): "Error parsing configuration: At line:1660 char:9
+         AADGroupLifecyclePolicy "AADGroupLifecyclePolicy"

Environment Information + PowerShell Version

@ricmestre
Copy link
Contributor

That property is set as required so it must exist in the blueprint, if you want to exclude it from being checked then just add -ExcludedProperties @("AlternateNotificationEmails") to your Assert-M365DSCBlueprint command.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants