从 perm AD powershell 脚本添加 Azure 组成员

Question

我有一个 Powershell 脚本，它每天在我们的永久广告上运行，并为新员工做一些操作。我也在尝试将这些用户添加到我们的 Azure AD 组之一 (Add-AzureADGroupMember)，但目前在尝试获取 ObjectId 时运气不好。

知道我做错了什么吗？

Import-Module ActiveDirectory
Import-module AzureAD

$tenantId = "1516515611561651651"
$azureUser = "my@mail.com"
$AzureCredential = Get-Content "Encrypted.txt" | ConvertTo-SecureString -Key (1..16)
$AzureCred = New-Object -TypeName "System.Management.Automation.PSCredential" -ArgumentList $AzureUser, $AzureCredential
$SearchBase = "OU=ou,DC=DC,DC=my"

Get-ADUser -SearchBase $SearchBase -Properties extensionAttribute1, mail, extensionAttribute12, userPrincipalName -Filter * | ForEach-Object {
          # Connect to Azure AD
          Connect-AzureAD -AccountId $azureUser -TenantId $TenantId -Credential $AzureCred
          $objid= Get-AzureADUser -Filter "userPrincipalName eq '$_.userPrincipalName'" | select ObjectId
          Add-AzureADGroupMember -ObjectId 6546fewf4s894f98sdfsd4f -RefObjectId $objid
}

Answer 1

由于 Get-AzureADUser 参数 ObjectId 接受 UPN 值，您可以简化语法并删除过滤。您也只需连接到 AzureAD 一次，而不是为每个用户连接一次。在 Select-Object retrieves only the value of that property rather than an object that contains the property. Add-AzureAdGroupMember 参数 -RefObjId 上使用 -Expand 或 -ExpandProperty 需要一个仅包含 objectID 值的字符串。

Import-Module ActiveDirectory
Import-module AzureAD

$tenantId = "1516515611561651651"
$azureUser = "my@mail.com"
$AzureCredential = Get-Content "Encrypted.txt" | ConvertTo-SecureString -Key (1..16)
$AzureCred = New-Object -TypeName "System.Management.Automation.PSCredential" -ArgumentList $AzureUser, $AzureCredential
$SearchBase = "OU=ou,DC=DC,DC=my"

# Connect to Azure AD
Connect-AzureAD -AccountId $azureUser -TenantId $TenantId -Credential $AzureCred

Get-ADUser -SearchBase $SearchBase -Properties extensionAttribute1, mail, extensionAttribute12, userPrincipalName -Filter * | ForEach-Object {
          $objid = Get-AzureADUser -ObjectId $_.userPrincipalName | Select -Expand ObjectId
          Add-AzureADGroupMember -ObjectId 6546fewf4s894f98sdfsd4f -RefObjectId $objid
}

从 perm AD powershell 脚本添加 Azure 组成员

Add Azure group member from on perm AD powershell script

powershell

active-directory

azure-active-directory