forked from modularity/ADOpowershell
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCreate SG Add member to SG.ps1
120 lines (95 loc) · 3.55 KB
/
Create SG Add member to SG.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
function New-AzDevOpsSecurityGroup
{
[CmdletBinding()]
param
(
[Parameter(mandatory = $true)]
[string]$azDevOpsOrgUrl,
[Parameter(mandatory = $true)]
[string]$azDevOpsProject,
[Parameter(mandatory = $true)]
[string]$securityGroupName,
[Parameter(mandatory = $true)]
[string]$securityGroupDescription,
[Parameter(mandatory = $false)]
[array]$memberArray
)
$newSecurityGroup = az devops security group create --name $securityGroupName --project $azDevOpsProject --description $securityGroupDescription --output json;
if (!$newSecurityGroup)
{
throw "Failed to create security group!";
}
Write-Output "Security group successfully created:";
Write-Output $newSecurityGroup;
if ($memberArray)
{
$newSecurityGroup = $newSecurityGroup | ConvertFrom-Json;
$addedMembers = @();
foreach ($member in $memberArray)
{
$thisMember = az devops security group membership add --group-id $newSecurityGroup.descriptor --member-id $member --output json;
if ($thisMember)
{
$addedMembers += $($thisMember | ConvertFrom-Json);
}
else
{
Write-Error -Message "Failed to add $member to the $securityGroupName security group!" -ErrorAction Continue;
}
}
Write-Output "Members successfully added:";
Write-Output $($addedMembers | ConvertTo-Json -Depth 10);
}
}
function Add-AzDevOpsSecurityGroupMembers
{
[CmdletBinding()]
param (
[Parameter(mandatory = $true)]
[string]$azDevOpsOrgUrl,
[Parameter(mandatory = $true)]
[string]$azDevOpsProject,
[Parameter(mandatory = $true)]
[string]$securityGroupName,
[Parameter(mandatory = $true)]
[array]$memberArray
)
$addedMembers = @();
# list security groups
$securityGroups = az devops security group list --project $azDevOpsProject --output json;
if (!$securityGroups)
{
Write-Error -Message "Unable to list security groups!" -ErrorAction Stop;
}
$securityGroups = $securityGroups | ConvertFrom-Json;
$thisSecurityGroup = $securityGroups.graphGroups | ? { $_.displayName -eq $securityGroupName };
if (!$thisSecurityGroup)
{
Write-Error -Message "The security group $SecurityGroupName does not exist!" -ErrorAction Stop;
}
foreach ($member in $memberArray)
{
$thisMember = az devops security group membership add --group-id $thisSecurityGroup.descriptor --member-id $member --output json;
if ($thisMember)
{
$addedMembers += $($thisMember | ConvertFrom-Json);
}
else
{
Write-Error -Message "Failed to add $member to the $securityGroupName security group!" -ErrorAction Continue;
}
}
Write-Output "Members successfully added:";
Write-Output $($addedMembers | ConvertTo-Json -Depth 10);
}
# create security group and add members
$newSG2 = @{
azDevOpsOrgUrl = "https://calenterprise.visualstudio.com/";
azDevOpsProject = "TestThinkSmart";
securityGroupName = "Contribute-NoDelete";
securityGroupDescription = "Foo bar 2 description can go here";
memberArray = @(
);
};
New-AzDevOpsSecurityGroup @newSG2;