Reorganize repo: compartmentalize scripts by client/project
Move 150+ scripts from root and scripts/ into client/project directories: - clients/dataforth/scripts/ (110 files: AD2, sync, SSH, DB, DOS scripts) - clients/bg-builders/scripts/ (14 files: Lesley mgmt, Exchange, termination) - clients/internal-infrastructure/scripts/ (10 files: GDAP, Gitea, backups) - projects/msp-tools/scripts/ (9 files: CIPP, MSP onboarding, Datto) - projects/gururmm-agent/scripts/ (3 files: API test, JWT, record counts) - clients/glaztech/scripts/ (1 file: CentraStage removal) Also reorganized: - VPN scripts → infrastructure/vpn-configs/ - Retrieved API/JS files → api/ - Forum posts → projects/community-forum/forum-posts/ - SSH docs → clients/internal-infrastructure/docs/ - NWTOC/CTONW docs → projects/wrightstown-smarthome/docs/ - ACG website files → projects/internal/acg-website-2025/ - Dataforth docs → clients/dataforth/docs/ - schema-retrieved.sql → docs/database/ Deleted 24 tmp_*.ps1 one-off debug scripts (preserved in git history). Root reduced from 220+ files to 62 items (docs + directories only). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
27
projects/msp-tools/scripts/check_rmm_status.cmd
Normal file
27
projects/msp-tools/scripts/check_rmm_status.cmd
Normal file
@@ -0,0 +1,27 @@
|
||||
@echo off
|
||||
REM Check current status of ClaudeTools API on RMM server
|
||||
|
||||
echo ============================================================
|
||||
echo ClaudeTools API Status Check
|
||||
echo ============================================================
|
||||
echo.
|
||||
|
||||
echo [1] API Service Status:
|
||||
plink guru@172.16.3.30 "sudo systemctl status claudetools-api --no-pager | head -15"
|
||||
echo.
|
||||
|
||||
echo [2] Current Code Version (checking for search_term parameter):
|
||||
plink guru@172.16.3.30 "grep -c 'search_term.*Query' /opt/claudetools/api/routers/conversation_contexts.py"
|
||||
echo (0 = OLD CODE, 1+ = NEW CODE)
|
||||
echo.
|
||||
|
||||
echo [3] File Last Modified:
|
||||
plink guru@172.16.3.30 "ls -lh /opt/claudetools/api/routers/conversation_contexts.py"
|
||||
echo.
|
||||
|
||||
echo [4] API Response Format:
|
||||
python -c "import requests; jwt='eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJpbXBvcnQtc2NyaXB0Iiwic2NvcGVzIjpbImFkbWluIiwiaW1wb3J0Il0sImV4cCI6MTc3MTI3NTEyOX0.-DJF50tq0MaNwVQBdO7cGYNuO5pQuXte-tTj5DpHi2U'; r=requests.get('http://172.16.3.30:8001/api/conversation-contexts/recall', headers={'Authorization': f'Bearer {jwt}'}, params={'limit': 1}); print(f'Response keys: {list(r.json().keys())}'); print('Format: NEW' if 'contexts' in r.json() else 'Format: OLD')"
|
||||
echo.
|
||||
|
||||
echo ============================================================
|
||||
pause
|
||||
141
projects/msp-tools/scripts/cipp-add-claude-app-template.ps1
Normal file
141
projects/msp-tools/scripts/cipp-add-claude-app-template.ps1
Normal file
@@ -0,0 +1,141 @@
|
||||
# CIPP - Add Claude-MSP-Access as Auto-Consent App Template
|
||||
# This adds Claude's app to CIPP so it gets automatically consented
|
||||
# when you add new tenants via CIPP.
|
||||
#
|
||||
# Uses the CIPP API (ClaudeCipp2 credentials)
|
||||
|
||||
$ErrorActionPreference = "Stop"
|
||||
|
||||
$cippUrl = "https://cippcanvb.azurewebsites.net"
|
||||
$cippTenantId = "ce61461e-81a0-4c84-bb4a-7b354a9a356d"
|
||||
$cippClientId = "420cb849-542d-4374-9cb2-3d8ae0e1835b"
|
||||
$cippClientSecret = "MOn8Q~otmxJPLvmL~_aCVTV8Va4t4~SrYrukGbJT"
|
||||
$cippScope = "api://420cb849-542d-4374-9cb2-3d8ae0e1835b/.default"
|
||||
|
||||
$claudeAppId = "fabb3421-8b34-484b-bc17-e46de9703418"
|
||||
|
||||
Write-Output "========================================="
|
||||
Write-Output " CIPP - Add Claude-MSP-Access Template"
|
||||
Write-Output " $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')"
|
||||
Write-Output "========================================="
|
||||
|
||||
# --- STEP 1: Get CIPP API token ---
|
||||
Write-Output "`n[STEP 1] Getting CIPP API token..."
|
||||
$tokenBody = @{
|
||||
client_id = $cippClientId
|
||||
client_secret = $cippClientSecret
|
||||
scope = $cippScope
|
||||
grant_type = "client_credentials"
|
||||
}
|
||||
$tokenResponse = Invoke-RestMethod -Uri "https://login.microsoftonline.com/$cippTenantId/oauth2/v2.0/token" -Method POST -Body $tokenBody
|
||||
$token = $tokenResponse.access_token
|
||||
Write-Output "[OK] Got CIPP API token"
|
||||
|
||||
$headers = @{
|
||||
"Authorization" = "Bearer $token"
|
||||
"Content-Type" = "application/json"
|
||||
}
|
||||
|
||||
# --- STEP 2: Check existing app approval templates ---
|
||||
Write-Output "`n[STEP 2] Checking existing app approval templates..."
|
||||
try {
|
||||
$existing = Invoke-RestMethod -Uri "$cippUrl/api/ExecAppPermissionTemplate" -Headers $headers -Method GET
|
||||
Write-Output "[INFO] Found $($existing.Count) existing template(s)"
|
||||
foreach ($tmpl in $existing) {
|
||||
Write-Output " - $($tmpl.displayName) ($($tmpl.appId))"
|
||||
}
|
||||
} catch {
|
||||
Write-Output "[INFO] No existing templates or endpoint returned error: $($_.Exception.Message)"
|
||||
}
|
||||
|
||||
# --- STEP 3: Add Claude-MSP-Access as app template ---
|
||||
Write-Output "`n[STEP 3] Adding Claude-MSP-Access app template..."
|
||||
|
||||
# Application permissions Claude needs consented in each customer tenant
|
||||
$appPermissions = @(
|
||||
"User.ReadWrite.All",
|
||||
"Directory.ReadWrite.All",
|
||||
"Mail.ReadWrite",
|
||||
"MailboxSettings.ReadWrite",
|
||||
"AuditLog.Read.All",
|
||||
"Application.ReadWrite.All",
|
||||
"DelegatedPermissionGrant.ReadWrite.All",
|
||||
"Group.ReadWrite.All",
|
||||
"GroupMember.ReadWrite.All",
|
||||
"SecurityEvents.ReadWrite.All",
|
||||
"SecurityEvents.Read.All",
|
||||
"SecurityIncident.ReadWrite.All",
|
||||
"AppRoleAssignment.ReadWrite.All",
|
||||
"UserAuthenticationMethod.ReadWrite.All",
|
||||
"Organization.ReadWrite.All",
|
||||
"Domain.Read.All",
|
||||
"Policy.Read.All",
|
||||
"Policy.ReadWrite.ConditionalAccess",
|
||||
"Policy.ReadWrite.AuthenticationMethod",
|
||||
"Policy.ReadWrite.AuthenticationFlows",
|
||||
"Policy.ReadWrite.ApplicationConfiguration",
|
||||
"Policy.ReadWrite.ConsentRequest",
|
||||
"Policy.ReadWrite.CrossTenantAccess",
|
||||
"Reports.Read.All",
|
||||
"ReportSettings.ReadWrite.All",
|
||||
"Device.ReadWrite.All",
|
||||
"DeviceManagementApps.ReadWrite.All",
|
||||
"DeviceManagementConfiguration.ReadWrite.All",
|
||||
"DeviceManagementManagedDevices.ReadWrite.All",
|
||||
"DeviceManagementManagedDevices.PrivilegedOperations.All",
|
||||
"DeviceManagementRBAC.ReadWrite.All",
|
||||
"DeviceManagementServiceConfig.ReadWrite.All",
|
||||
"CrossTenantInformation.ReadBasic.All",
|
||||
"Channel.Create",
|
||||
"Channel.ReadBasic.All",
|
||||
"ChannelMember.ReadWrite.All",
|
||||
"Files.ReadWrite.All",
|
||||
"Group.Create",
|
||||
"InformationProtectionPolicy.Read.All",
|
||||
"Place.Read.All",
|
||||
"PrivilegedAccess.ReadWrite.AzureADGroup",
|
||||
"SharePointTenantSettings.ReadWrite.All",
|
||||
"Sites.FullControl.All",
|
||||
"TeamMember.ReadWrite.All",
|
||||
"TeamMember.ReadWriteNonOwnerRole.All",
|
||||
"TeamsTelephoneNumber.ReadWrite.All"
|
||||
)
|
||||
|
||||
$templateBody = @{
|
||||
AppId = $claudeAppId
|
||||
displayName = "Claude-MSP-Access (AI Investigation & Remediation)"
|
||||
Permissions = $appPermissions
|
||||
} | ConvertTo-Json -Depth 5
|
||||
|
||||
try {
|
||||
$result = Invoke-RestMethod -Uri "$cippUrl/api/ExecAppPermissionTemplate" -Headers $headers -Method POST -Body $templateBody
|
||||
Write-Output "[OK] Template added: $($result | ConvertTo-Json -Compress)"
|
||||
} catch {
|
||||
$errBody = $_.ErrorDetails.Message
|
||||
Write-Output "[WARNING] API response: $errBody"
|
||||
Write-Output "[INFO] If the endpoint doesn't support POST, you can add the template manually:"
|
||||
Write-Output " CIPP > Settings > Application Approval > Add Application"
|
||||
Write-Output " App ID: $claudeAppId"
|
||||
Write-Output " Name: Claude-MSP-Access (AI Investigation & Remediation)"
|
||||
Write-Output ""
|
||||
Write-Output "Or use the CIPP UI to navigate to:"
|
||||
Write-Output " Tenant Administration > Application Approval"
|
||||
Write-Output " Click 'Add App' and enter the App ID above"
|
||||
}
|
||||
|
||||
# --- STEP 4: Summary ---
|
||||
Write-Output "`n========================================="
|
||||
Write-Output " TEMPLATE SETUP SUMMARY"
|
||||
Write-Output "========================================="
|
||||
Write-Output ""
|
||||
Write-Output "App ID: $claudeAppId"
|
||||
Write-Output "Name: Claude-MSP-Access (AI Investigation & Remediation)"
|
||||
Write-Output "Perms: $($appPermissions.Count) application permissions"
|
||||
Write-Output ""
|
||||
Write-Output "What happens now:"
|
||||
Write-Output " 1. When you add a new tenant in CIPP, Claude's app gets auto-consented"
|
||||
Write-Output " 2. For existing tenants, run CPV Refresh in CIPP to push the permissions"
|
||||
Write-Output " 3. The admin consent URL also works as a manual fallback:"
|
||||
Write-Output ""
|
||||
Write-Output " https://login.microsoftonline.com/common/adminconsent?client_id=$claudeAppId&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient"
|
||||
Write-Output ""
|
||||
640
projects/msp-tools/scripts/claude-msp-combined-manifest.json
Normal file
640
projects/msp-tools/scripts/claude-msp-combined-manifest.json
Normal file
@@ -0,0 +1,640 @@
|
||||
{
|
||||
"requiredResourceAccess": [
|
||||
{
|
||||
"resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "594c1fb6-4f81-4475-ae41-0c394909246c",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "aeb86249-8ea3-49e2-900b-54cc8e308f85",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "fc946a4f-bc4d-413b-a090-b2c86113ec4f",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "00000003-0000-0000-c000-000000000000",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "b0afded3-3588-46d8-8b3d-9842eff778da",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "5e1e9171-754d-478c-812c-f1755a9a4c2d",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "f3a65bd4-b703-46df-8f7e-0174fea562aa",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "59a6b24b-4225-4393-8165-ebaec5f55d7a",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "35930dcf-aceb-4bd1-b99a-8ffed403c974",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "cac88765-0581-4025-9725-5ebc13f729ee",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "1138cb37-bd11-4084-a2b7-9f71582aeddb",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "78145de6-330d-4800-a6ce-494ff2d33d07",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "9241abd9-d0e6-425a-bd4f-47ba86e767a4",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "5b07b0dd-2377-4e44-a38d-703f09a0dc3c",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "243333ab-4d21-40cb-a475-36241daa0842",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "e330c4f0-4170-414e-a55a-2f022ec2b57b",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "9255e99d-faf5-445e-bbf7-cb71482737c4",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "8b9d79d0-ad75-4566-8619-f7500ecfcebe",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "5ac13192-7ace-4fcf-b828-1a26f28068ee",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "19dbc75e-c2e2-444c-a770-ec69d8559fc7",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "dbb9058a-0e50-45d7-ae91-66909b5d4664",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "75359482-378d-4052-8f01-80520e7db3cd",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "bf7b1a76-6e77-406b-b258-bf5c7720e98f",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "62a82d76-70ea-41e2-9197-370581804d09",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "dbaae8cf-10b5-4b86-a4a1-f871c94c6695",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "19da66cb-0fb0-4390-b071-ebc76a349482",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "6931bccd-447a-43d1-b442-00a195474933",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "292d869f-3427-49a8-9dab-8c70152b74e9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2cb92fee-97a3-4034-8702-24a6f5d0d1e9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "b6890674-9dd5-4e42-bb15-5af07f541ae1",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "913b9306-0ce1-42b8-9137-6a7df690a760",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "246dd0d5-5bd0-4def-940b-0421030a5b68",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "be74164b-cff1-491c-8741-e671cb536e13",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "25f85f3c-f66c-4205-8cd5-de92dd7f0cec",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "29c18626-4985-4dcd-85c0-193eef327366",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "01c0a623-fc9b-48e9-b794-0756f8e8f067",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "999f8c63-0a38-4f1b-91fd-ed1947bdd1a9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "338163d7-f101-4c92-94ba-ca46fe52447c",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2f6817f8-7b12-4f0f-bc18-eeaf60705a9e",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "230c1aed-a721-4c5d-9cb4-a90514e508ef",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2a60023f-3219-47ad-baa4-40e17cd02a1d",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "025d3225-3f02-4882-b4c0-cd5b541a4e80",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "04c55753-2244-4c25-87fc-704ab82a4f69",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "bf394140-e372-4bf9-a898-299cfc7564e5",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "34bf0e97-1971-4929-b999-9e2442d941d7",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "19b94e34-907c-4f43-bde9-38b1909ed408",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "a82116e5-55eb-4c41-a434-62fe8a61c773",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "0121dc95-1b9f-4aed-8bac-58c5ac466691",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "4437522e-9a86-4a41-a7da-e380edd4a97d",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "741f803b-c850-494e-b5df-cde7c675a1ca",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "50483e42-d915-4231-9639-7fdb7fd190e5",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "bdfbf15f-ee85-4955-8675-146e8e5296b5",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "84bccea3-f856-4a8a-967b-dbe0a3d53a64",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b27a61ec-b99c-4d6a-b126-c4375d08ae30",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "101147cf-4178-4455-9d58-02b5c164e759",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "cc83893a-e232-4723-b5af-bd0b01bcfe65",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "9d8982ae-4365-4f57-95e9-d6032a4c0b87",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2eadaff8-0bce-4198-a6b9-2cfc35a30075",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0c3e411a-ce45-4cd1-8f30-f99a3efa7b11",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2b61aa8a-6d36-4b2f-ac7b-f29867937c53",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "767156cb-16ae-4d10-8f8b-41b657c8c8c8",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "ebf0f66e-9fb1-49e4-a278-222f76911cf4",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "d649fb7c-72b4-4eec-b2b4-b15acf79e378",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "f3bfad56-966e-4590-a536-82ecf548ac1e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "885f682f-a990-4bad-a642-36736a74b0c7",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "41ce6ca6-6826-4807-84f1-1c82854f7ee5",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "bac3b9c2-b516-4ef4-bd3b-c2ef73d8d804",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "11d4cd79-5ba5-460f-803f-e22c8ab85ccd",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "951183d1-1a61-466f-a6d1-1fde911bfd95",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "280b3b69-0437-44b1-bc20-3b2fca1ee3e9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7b3f05d5-f68c-4b8d-8c59-a2ecd12f24af",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0883f392-0a7a-443d-8c76-16a6d39c7b63",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "3404d2bf-2b13-457e-a330-c24615765193",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "44642bfe-8385-4adc-8fc6-fe3cb2c375c3",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0c5e8a55-87a6-4556-93ab-adc52c4d862d",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "662ed50a-ac44-4eef-ad86-62eed9be2a29",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0e263e50-5827-48a4-b97c-d940288653c7",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "c5366453-9fb0-48a5-a156-24f0c49a4b84",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2f9ee017-59c1-4f1d-9472-bd5529a7b311",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4e46008b-f24c-477d-8fff-7bb4ec7aafe0",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "f81125ac-d3b7-4573-a3b2-7099cc39df9e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "9e4862a5-b68f-479e-848a-4e07e25c9916",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "bb6f654c-d7fd-4ae3-85c3-fc380934f515",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e0a7cdbb-08b0-4697-8264-0069786e9674",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e383f46e-2787-4529-855e-0e479a3ffac0",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a367ab51-6b49-43bf-a716-a1fb06d2a174",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "818c620a-27a9-40bd-a6a5-d96f7d610b4b",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "f6a3db3e-f7e8-4ed2-a414-557c8c9830be",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7427e0e9-2fba-42fe-b0c0-848c9e6a8182",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "37f7f235-527c-4136-accd-4a02d197296e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "46ca0847-7e6b-426e-9775-ea810a948356",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "346c19ff-3fb2-4e81-87a0-bac9e33990c1",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e67e6727-c080-415e-b521-e3f35d5248e9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4c06a06a-098a-4063-868e-5dfee3827264",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "572fea84-0151-49b2-9301-11cb16974376",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b27add92-efb2-4f16-84f5-8108ba77985c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "edb72de9-4252-4d03-a925-451deef99db7",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7e823077-d88e-468f-a337-e18f1f0e6c7c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "edd3c878-b384-41fd-95ad-e7407dd775be",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "ad902697-1014-4ef5-81ef-2b4301988e8c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4d135e65-66b8-41a8-9f8b-081452c91774",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "40b534c3-9552-4550-901b-23879c90bcf9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a8ead177-1889-4546-9387-f25e658e2a79",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a84a9652-ffd3-496e-a991-22ba5529156a",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "14dad69e-099b-42c9-810b-d002981feec1",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "02e97553-ed7b-43d0-ab3c-f8bace0d040c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b955410e-7715-4a88-a940-dfd551018df3",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "d01b97e9-cbc0-49fe-810a-750afd5527a3",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "dc38509c-b87d-4da0-bd92-6bec988bac4a",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "6aedf524-7e1c-45a7-bd76-ded8cab8d0fc",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "128ca929-1a19-45e6-a3b8-435ec44a36ba",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "55896846-df78-47a7-aa94-8d3d4442ca7f",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "eda39fa6-f8cf-4c3c-a909-432c683e4c9b",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "aa07f155-3612-49b8-a147-6c590df35536",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "89fe6a52-be36-487e-b7d8-d061c450a026",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "485be79e-c497-4b35-9400-0e3fa7f2a5d4",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4a06efd2-f825-4e34-813e-82a57b03d1ee",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2104a4db-3a2f-4ea0-9dba-143d457dc666",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0e755559-83fb-4b44-91d0-4cc721b9323e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "39d65650-9d3e-4223-80db-a335590d027e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a9ff19c2-f369-4a95-9a25-ba9d460efc8e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b98bfd41-87c6-45cc-b104-e2de4f0dafb9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "cac97e40-6730-457d-ad8d-4852fddab7ad",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "73e75199-7c3e-41bb-9357-167164dbb415",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "637d7bec-b31e-4deb-acc9-24275642a2c9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "204e0828-b5ca-4ad8-b9f3-f32a958e7cc4",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "48971fc1-70d7-4245-af77-0beb29b53ee2",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b7887744-6746-4312-813d-72daeaee7e2d",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "424b07a8-1209-4d17-9fe4-9018a93a1024",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0a42382f-155c-4eb1-9bdc-21548ccaa387",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2d9bd318-b883-40be-9df7-63ec4fcdc424",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "c8948c23-e66b-42db-83fd-770b71ab78d2",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "a94a502d-0281-4d15-8cd2-682ac9362c4c",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "e2a3a72e-5f79-4c64-b1b1-878b674786c9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "06b708a9-e830-4db3-a914-8e69da51d44f",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "d903a879-88e0-4c09-b0c9-82f6a1333f84",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "8e8e4742-1d95-4f68-9d56-6ee75648c72a",
|
||||
"type": "Role"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "fa3d9a0c-3fb0-42cc-9193-47c7ecd2edbd",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "1cebfa2a-fb4d-419e-b5f9-839b4383e05a",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "dc50a0fb-09a3-484d-be87-e023b12c6440",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "ef54d2bf-783f-4e0f-bca1-3210c0444d99",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "f9156939-25cd-4ba8-abfe-7fabcf003749",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "ab4f2b77-0b06-4fc1-a9de-02113fc2ab7c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "bbd1ca91-75e0-4814-ad94-9c5dbbae3415",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2e83d72d-8895-4b66-9eea-abb43449ab8b",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "00000003-0000-0ff1-ce00-000000000000",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "56680e0d-d2a3-4ae1-80d8-3c4f2100e3d0",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "48ac35b8-9aa8-4d74-927d-1f4a14a0b239",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "e60370c1-e451-437e-aa6e-d76df38e5f15",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "fc780465-2017-40d4-a0c5-307022471b92",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "41269fc5-d04d-4bfd-bce7-43a51cea049a",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "63a677ce-818c-4409-9d12-5c6d2e2a6bfe",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
188
projects/msp-tools/scripts/claude-msp-onboard-tenant.ps1
Normal file
188
projects/msp-tools/scripts/claude-msp-onboard-tenant.ps1
Normal file
@@ -0,0 +1,188 @@
|
||||
# Claude-MSP-Access - Automated Tenant Onboarding
|
||||
# Onboards a customer tenant with full Claude + CIPP permissions
|
||||
# No manual intervention required after initial admin consent
|
||||
#
|
||||
# Usage: .\claude-msp-onboard-tenant.ps1 -TenantDomain "sonorangreenllc.com"
|
||||
#
|
||||
# Prerequisites: Admin consent URL must be clicked first by customer/sysadmin:
|
||||
# https://login.microsoftonline.com/common/adminconsent?client_id=fabb3421-8b34-484b-bc17-e46de9703418&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient
|
||||
#
|
||||
# What this script does after consent:
|
||||
# 1. Finds the Claude-MSP-Access service principal in the customer tenant
|
||||
# 2. Activates Exchange Administrator directory role (if not active)
|
||||
# 3. Assigns Exchange Administrator to Claude's SP (via CIPP Graph proxy)
|
||||
# 4. Verifies all access: Graph, Exchange, Mail, Security, Intune
|
||||
|
||||
param(
|
||||
[Parameter(Mandatory=$true)]
|
||||
[string]$TenantDomain
|
||||
)
|
||||
|
||||
$ErrorActionPreference = "Stop"
|
||||
|
||||
# --- Credentials ---
|
||||
$cippUrl = "https://cippcanvb.azurewebsites.net"
|
||||
$cippTenantId = "ce61461e-81a0-4c84-bb4a-7b354a9a356d"
|
||||
$cippClientId = "420cb849-542d-4374-9cb2-3d8ae0e1835b"
|
||||
$cippSecret = "MOn8Q~otmxJPLvmL~_aCVTV8Va4t4~SrYrukGbJT"
|
||||
|
||||
$claudeAppId = "fabb3421-8b34-484b-bc17-e46de9703418"
|
||||
$claudeSecret = "~QJ8Q~NyQSs4OcGqHZyPrA2CVnq9KBfKiimntbMO"
|
||||
|
||||
Write-Output "========================================="
|
||||
Write-Output " Claude-MSP-Access - Tenant Onboarding"
|
||||
Write-Output " Tenant: $TenantDomain"
|
||||
Write-Output " $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')"
|
||||
Write-Output "========================================="
|
||||
|
||||
# --- STEP 1: Get CIPP API token ---
|
||||
Write-Output "`n[STEP 1] Getting CIPP API token..."
|
||||
$tokenBody = @{
|
||||
client_id = $cippClientId
|
||||
client_secret = $cippSecret
|
||||
scope = "api://$cippClientId/.default"
|
||||
grant_type = "client_credentials"
|
||||
}
|
||||
$cippToken = (Invoke-RestMethod -Uri "https://login.microsoftonline.com/$cippTenantId/oauth2/v2.0/token" -Method POST -Body $tokenBody).access_token
|
||||
$cippHeaders = @{ "Authorization" = "Bearer $cippToken" }
|
||||
Write-Output "[OK] CIPP token acquired"
|
||||
|
||||
# --- STEP 2: Find Claude SP in customer tenant via CIPP ---
|
||||
Write-Output "`n[STEP 2] Finding Claude-MSP-Access service principal..."
|
||||
$spFilter = [uri]::EscapeDataString("appId eq '$claudeAppId'")
|
||||
$spResult = Invoke-RestMethod -Uri "$cippUrl/api/ListGraphRequest?TenantFilter=$TenantDomain&Endpoint=servicePrincipals&`$filter=$spFilter" -Headers $cippHeaders
|
||||
$sp = $spResult.Results | Select-Object -First 1
|
||||
|
||||
if (-not $sp) {
|
||||
Write-Output "[ERROR] Claude-MSP-Access SP not found in $TenantDomain"
|
||||
Write-Output "[INFO] Has admin consent been completed? Use this URL:"
|
||||
Write-Output " https://login.microsoftonline.com/common/adminconsent?client_id=$claudeAppId&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient"
|
||||
exit 1
|
||||
}
|
||||
$spId = $sp.id
|
||||
Write-Output "[OK] Found SP: $($sp.displayName) (ID: $spId)"
|
||||
|
||||
# --- STEP 3: Get Exchange Administrator role ID ---
|
||||
Write-Output "`n[STEP 3] Finding Exchange Administrator role..."
|
||||
$rolesResult = Invoke-RestMethod -Uri "$cippUrl/api/ListGraphRequest?TenantFilter=$TenantDomain&Endpoint=directoryRoles" -Headers $cippHeaders
|
||||
$exoRole = $rolesResult.Results | Where-Object { $_.displayName -eq "Exchange Administrator" }
|
||||
|
||||
if (-not $exoRole) {
|
||||
Write-Output "[INFO] Exchange Admin role not activated, activating from template..."
|
||||
# Exchange Administrator role template ID is always 29232cdf-9323-42fd-ade2-1d097af3e4de
|
||||
$activateBody = [uri]::EscapeDataString((@{ roleTemplateId = "29232cdf-9323-42fd-ade2-1d097af3e4de" } | ConvertTo-Json -Compress))
|
||||
$activateResult = Invoke-RestMethod -Uri "$cippUrl/api/ListGraphRequest?TenantFilter=$TenantDomain&Endpoint=directoryRoles&type=POST&body=$activateBody" -Headers $cippHeaders
|
||||
|
||||
# Re-fetch roles
|
||||
$rolesResult = Invoke-RestMethod -Uri "$cippUrl/api/ListGraphRequest?TenantFilter=$TenantDomain&Endpoint=directoryRoles" -Headers $cippHeaders
|
||||
$exoRole = $rolesResult.Results | Where-Object { $_.displayName -eq "Exchange Administrator" }
|
||||
}
|
||||
|
||||
if (-not $exoRole) {
|
||||
Write-Output "[ERROR] Could not find or activate Exchange Administrator role"
|
||||
exit 1
|
||||
}
|
||||
$exoRoleId = $exoRole.id
|
||||
Write-Output "[OK] Exchange Admin role: $exoRoleId"
|
||||
|
||||
# --- STEP 4: Assign Exchange Administrator to Claude SP ---
|
||||
Write-Output "`n[STEP 4] Assigning Exchange Administrator role..."
|
||||
$assignEndpoint = [uri]::EscapeDataString("directoryRoles/$exoRoleId/members/`$ref")
|
||||
$assignBody = [uri]::EscapeDataString((@{ "@odata.id" = "https://graph.microsoft.com/v1.0/servicePrincipals/$spId" } | ConvertTo-Json -Compress))
|
||||
try {
|
||||
$assignResult = Invoke-RestMethod -Uri "$cippUrl/api/ListGraphRequest?TenantFilter=$TenantDomain&Endpoint=$assignEndpoint&type=POST&body=$assignBody" -Headers $cippHeaders
|
||||
if ($assignResult.Results.CippStatus -eq "Good") {
|
||||
Write-Output "[OK] Exchange Administrator assigned to Claude-MSP-Access"
|
||||
} else {
|
||||
Write-Output "[INFO] Assignment result: $($assignResult.Results | ConvertTo-Json -Compress)"
|
||||
}
|
||||
} catch {
|
||||
$errMsg = $_.Exception.Message
|
||||
if ($errMsg -match "already exist") {
|
||||
Write-Output "[OK] Exchange Administrator already assigned"
|
||||
} else {
|
||||
Write-Output "[WARNING] Role assignment: $errMsg"
|
||||
}
|
||||
}
|
||||
|
||||
# --- STEP 5: Verify Claude API access ---
|
||||
Write-Output "`n[STEP 5] Verifying Claude-MSP-Access API connectivity..."
|
||||
|
||||
# Get tenant ID from CIPP
|
||||
$selectFields = [uri]::EscapeDataString("id,displayName")
|
||||
$orgResult = Invoke-RestMethod -Uri "$cippUrl/api/ListGraphRequest?TenantFilter=$TenantDomain&Endpoint=organization&`$select=$selectFields" -Headers $cippHeaders
|
||||
$customerTenantId = $orgResult.Results[0].id
|
||||
Write-Output "[INFO] Tenant ID: $customerTenantId"
|
||||
|
||||
# Get Claude token for this tenant
|
||||
$claudeTokenBody = @{
|
||||
client_id = $claudeAppId
|
||||
client_secret = $claudeSecret
|
||||
scope = "https://graph.microsoft.com/.default"
|
||||
grant_type = "client_credentials"
|
||||
}
|
||||
try {
|
||||
$claudeToken = (Invoke-RestMethod -Uri "https://login.microsoftonline.com/$customerTenantId/oauth2/v2.0/token" -Method POST -Body $claudeTokenBody).access_token
|
||||
Write-Output "[OK] Claude Graph token acquired"
|
||||
} catch {
|
||||
Write-Output "[ERROR] Could not get Claude token - admin consent may not be complete"
|
||||
Write-Output " $($_.Exception.Message)"
|
||||
exit 1
|
||||
}
|
||||
$claudeHeaders = @{ "Authorization" = "Bearer $claudeToken"; "Content-Type" = "application/json" }
|
||||
|
||||
# Test endpoints
|
||||
$tests = @(
|
||||
@{ Name = "Users"; Uri = "https://graph.microsoft.com/v1.0/users?`$top=1&`$select=displayName" },
|
||||
@{ Name = "Security"; Uri = "https://graph.microsoft.com/v1.0/security/alerts?`$top=1" },
|
||||
@{ Name = "AuditLogs"; Uri = "https://graph.microsoft.com/v1.0/auditLogs/signIns?`$top=1" },
|
||||
@{ Name = "Policies"; Uri = "https://graph.microsoft.com/v1.0/identity/conditionalAccess/policies" },
|
||||
@{ Name = "Devices"; Uri = "https://graph.microsoft.com/v1.0/deviceManagement/managedDevices?`$top=1" }
|
||||
)
|
||||
|
||||
foreach ($test in $tests) {
|
||||
try {
|
||||
$r = Invoke-RestMethod -Uri $test.Uri -Headers $claudeHeaders -ErrorAction Stop
|
||||
Write-Output " [OK] $($test.Name)"
|
||||
} catch {
|
||||
$code = $_.Exception.Response.StatusCode.value__
|
||||
Write-Output " [FAIL] $($test.Name): HTTP $code"
|
||||
}
|
||||
}
|
||||
|
||||
# Test Exchange Online REST
|
||||
Write-Output "`n Testing Exchange Online REST API..."
|
||||
try {
|
||||
$exoTokenBody = @{
|
||||
client_id = $claudeAppId
|
||||
client_secret = $claudeSecret
|
||||
scope = "https://outlook.office365.com/.default"
|
||||
grant_type = "client_credentials"
|
||||
}
|
||||
$exoToken = (Invoke-RestMethod -Uri "https://login.microsoftonline.com/$customerTenantId/oauth2/v2.0/token" -Method POST -Body $exoTokenBody).access_token
|
||||
$exoHeaders = @{ "Authorization" = "Bearer $exoToken"; "Content-Type" = "application/json" }
|
||||
|
||||
$invokeUrl = "https://outlook.office365.com/adminapi/beta/$customerTenantId/InvokeCommand"
|
||||
$getMailbox = @{
|
||||
CmdletInput = @{
|
||||
CmdletName = "Get-Mailbox"
|
||||
Parameters = @{ ResultSize = "1" }
|
||||
}
|
||||
} | ConvertTo-Json -Depth 5
|
||||
|
||||
$r = Invoke-RestMethod -Uri $invokeUrl -Headers $exoHeaders -Method POST -Body $getMailbox -ErrorAction Stop
|
||||
Write-Output " [OK] Exchange Online (Get-Mailbox)"
|
||||
} catch {
|
||||
Write-Output " [FAIL] Exchange Online: $($_.Exception.Message)"
|
||||
}
|
||||
|
||||
# --- DONE ---
|
||||
Write-Output "`n========================================="
|
||||
Write-Output " ONBOARDING COMPLETE: $TenantDomain"
|
||||
Write-Output " $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')"
|
||||
Write-Output "========================================="
|
||||
Write-Output ""
|
||||
Write-Output "Claude-MSP-Access is fully operational for this tenant."
|
||||
Write-Output "Capabilities: User mgmt, mail access, security alerts,"
|
||||
Write-Output "audit logs, conditional access, Intune, Exchange admin,"
|
||||
Write-Output "litigation hold, and all CIPP SAM operations."
|
||||
93
projects/msp-tools/scripts/claude-msp-update-permissions.ps1
Normal file
93
projects/msp-tools/scripts/claude-msp-update-permissions.ps1
Normal file
@@ -0,0 +1,93 @@
|
||||
# Claude-MSP-Access - Update App Registration with Combined CIPP + Investigation Permissions
|
||||
# App ID: fabb3421-8b34-484b-bc17-e46de9703418
|
||||
# Partner Tenant: ce61461e-81a0-4c84-bb4a-7b354a9a356d
|
||||
#
|
||||
# This script updates the app registration to include:
|
||||
# - All CIPP SAM required permissions (Graph, Exchange, SharePoint, Intune, PowerBI, Partner Center)
|
||||
# - Claude investigation extras (Mail.ReadWrite, SecurityEvents.ReadWrite.All, etc.)
|
||||
#
|
||||
# After running this, the admin consent URL will grant everything in one click.
|
||||
|
||||
$ErrorActionPreference = "Stop"
|
||||
$tenantId = "ce61461e-81a0-4c84-bb4a-7b354a9a356d"
|
||||
$appId = "fabb3421-8b34-484b-bc17-e46de9703418"
|
||||
|
||||
Write-Output "========================================="
|
||||
Write-Output " Claude-MSP-Access - Permission Update"
|
||||
Write-Output " $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')"
|
||||
Write-Output "========================================="
|
||||
|
||||
# --- STEP 1: Connect to Graph ---
|
||||
Write-Output "`n[STEP 1] Connecting to Microsoft Graph..."
|
||||
Import-Module Microsoft.Graph.Authentication
|
||||
Import-Module Microsoft.Graph.Applications
|
||||
Connect-MgGraph -TenantId $tenantId -Scopes 'Application.ReadWrite.All' -NoWelcome
|
||||
Write-Output "[OK] Connected to Graph"
|
||||
|
||||
# --- STEP 2: Get current app registration ---
|
||||
Write-Output "`n[STEP 2] Reading current app registration..."
|
||||
$app = Get-MgApplication -Filter "appId eq '$appId'"
|
||||
if (-not $app) {
|
||||
Write-Output "[ERROR] App not found: $appId"
|
||||
exit 1
|
||||
}
|
||||
Write-Output "[OK] Found: $($app.DisplayName) (Object ID: $($app.Id))"
|
||||
$currentPerms = ($app.RequiredResourceAccess | ForEach-Object { $_.ResourceAccess }).Count
|
||||
Write-Output "[INFO] Current permission count: $currentPerms"
|
||||
|
||||
# --- STEP 3: Load combined manifest ---
|
||||
Write-Output "`n[STEP 3] Loading combined permission manifest..."
|
||||
$manifestPath = Join-Path $PSScriptRoot "claude-msp-combined-manifest.json"
|
||||
$manifest = Get-Content $manifestPath -Raw | ConvertFrom-Json
|
||||
|
||||
# Build the requiredResourceAccess array
|
||||
$resourceAccess = @()
|
||||
foreach ($resource in $manifest.requiredResourceAccess) {
|
||||
$accessList = @()
|
||||
foreach ($access in $resource.resourceAccess) {
|
||||
$accessList += @{
|
||||
Id = $access.id
|
||||
Type = $access.type
|
||||
}
|
||||
}
|
||||
$resourceAccess += @{
|
||||
ResourceAppId = $resource.resourceAppId
|
||||
ResourceAccess = $accessList
|
||||
}
|
||||
}
|
||||
|
||||
$newPerms = ($manifest.requiredResourceAccess | ForEach-Object { $_.resourceAccess }).Count
|
||||
Write-Output "[INFO] New permission count: $newPerms"
|
||||
|
||||
# --- STEP 4: Update app registration ---
|
||||
Write-Output "`n[STEP 4] Updating app registration..."
|
||||
Update-MgApplication -ApplicationId $app.Id -RequiredResourceAccess $resourceAccess
|
||||
Write-Output "[OK] App registration updated with combined permissions"
|
||||
|
||||
# --- STEP 5: Verify ---
|
||||
Write-Output "`n[STEP 5] Verifying update..."
|
||||
$updated = Get-MgApplication -ApplicationId $app.Id
|
||||
$updatedPerms = ($updated.RequiredResourceAccess | ForEach-Object { $_.ResourceAccess }).Count
|
||||
Write-Output "[OK] Verified: $updatedPerms permissions across $($updated.RequiredResourceAccess.Count) resource APIs"
|
||||
|
||||
# --- STEP 6: Show admin consent URL ---
|
||||
Write-Output "`n[STEP 6] Admin consent URL (use this to onboard tenants):"
|
||||
Write-Output ""
|
||||
Write-Output " https://login.microsoftonline.com/common/adminconsent?client_id=$appId&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient"
|
||||
Write-Output ""
|
||||
Write-Output "[INFO] This single URL now grants ALL permissions:"
|
||||
Write-Output " - Microsoft Graph (application + delegated)"
|
||||
Write-Output " - Exchange Online (ManageAsApp + Calendars + Mailbox)"
|
||||
Write-Output " - SharePoint Online (FullControl)"
|
||||
Write-Output " - Intune (user_impersonation)"
|
||||
Write-Output " - PowerBI (Vulnerability.Read)"
|
||||
Write-Output " - Partner Center (user_impersonation)"
|
||||
Write-Output " - Office Management API (ActivityFeed.Read)"
|
||||
Write-Output " - Claude investigation extras (Mail.ReadWrite, SecurityEvents.ReadWrite.All)"
|
||||
|
||||
Write-Output "`n========================================="
|
||||
Write-Output " UPDATE COMPLETE"
|
||||
Write-Output " $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')"
|
||||
Write-Output "========================================="
|
||||
|
||||
Disconnect-MgGraph
|
||||
68
projects/msp-tools/scripts/datto-smartbadge-check.ps1
Normal file
68
projects/msp-tools/scripts/datto-smartbadge-check.ps1
Normal file
@@ -0,0 +1,68 @@
|
||||
Write-Output "=== HKCU Excel Addins ==="
|
||||
$path = "HKCU:\Software\Microsoft\Office\Excel\Addins"
|
||||
if (Test-Path $path) {
|
||||
Get-ChildItem $path | ForEach-Object {
|
||||
Write-Output "`n Key: $($_.PSChildName)"
|
||||
Get-ItemProperty $_.PSPath | Format-List
|
||||
}
|
||||
} else {
|
||||
Write-Output " Path not found"
|
||||
}
|
||||
|
||||
Write-Output "`n=== HKCU Word Addins ==="
|
||||
$path = "HKCU:\Software\Microsoft\Office\Word\Addins"
|
||||
if (Test-Path $path) {
|
||||
Get-ChildItem $path | ForEach-Object {
|
||||
Write-Output "`n Key: $($_.PSChildName)"
|
||||
Get-ItemProperty $_.PSPath | Format-List
|
||||
}
|
||||
} else {
|
||||
Write-Output " Path not found"
|
||||
}
|
||||
|
||||
Write-Output "`n=== HKCU PowerPoint Addins ==="
|
||||
$path = "HKCU:\Software\Microsoft\Office\PowerPoint\Addins"
|
||||
if (Test-Path $path) {
|
||||
Get-ChildItem $path | ForEach-Object {
|
||||
Write-Output "`n Key: $($_.PSChildName)"
|
||||
Get-ItemProperty $_.PSPath | Format-List
|
||||
}
|
||||
} else {
|
||||
Write-Output " Path not found"
|
||||
}
|
||||
|
||||
Write-Output "`n=== HKLM Excel Addins ==="
|
||||
$path = "HKLM:\Software\Microsoft\Office\Excel\Addins"
|
||||
if (Test-Path $path) {
|
||||
Get-ChildItem $path | ForEach-Object {
|
||||
Write-Output "`n Key: $($_.PSChildName)"
|
||||
Get-ItemProperty $_.PSPath | Format-List
|
||||
}
|
||||
} else {
|
||||
Write-Output " Path not found"
|
||||
}
|
||||
|
||||
Write-Output "`n=== HKLM WOW6432 Excel Addins ==="
|
||||
$path = "HKLM:\Software\WOW6432Node\Microsoft\Office\Excel\Addins"
|
||||
if (Test-Path $path) {
|
||||
Get-ChildItem $path | ForEach-Object {
|
||||
Write-Output "`n Key: $($_.PSChildName)"
|
||||
Get-ItemProperty $_.PSPath | Format-List
|
||||
}
|
||||
} else {
|
||||
Write-Output " Path not found"
|
||||
}
|
||||
|
||||
Write-Output "`n=== Search for any Datto/SmartBadge registry entries ==="
|
||||
$results = reg query "HKCU\Software\Microsoft\Office" /s /f "Datto" 2>&1
|
||||
$results | ForEach-Object { Write-Output $_ }
|
||||
$results2 = reg query "HKLM\Software\Microsoft\Office" /s /f "Datto" 2>&1
|
||||
$results2 | ForEach-Object { Write-Output $_ }
|
||||
$results3 = reg query "HKLM\Software\WOW6432Node\Microsoft\Office" /s /f "SmartBadge" 2>&1
|
||||
$results3 | ForEach-Object { Write-Output $_ }
|
||||
|
||||
Write-Output "`n=== SmartBadge DLL registration (CLSID) ==="
|
||||
$results4 = reg query "HKLM\Software\Classes\CLSID" /s /f "SmartBadge" 2>&1
|
||||
$results4 | Select-Object -First 20 | ForEach-Object { Write-Output $_ }
|
||||
$results5 = reg query "HKCU\Software\Classes\CLSID" /s /f "SmartBadge" 2>&1
|
||||
$results5 | Select-Object -First 20 | ForEach-Object { Write-Output $_ }
|
||||
100
projects/msp-tools/scripts/datto-smartbadge-fix.reg
Normal file
100
projects/msp-tools/scripts/datto-smartbadge-fix.reg
Normal file
@@ -0,0 +1,100 @@
|
||||
Windows Registry Editor Version 5.00
|
||||
|
||||
; Datto SmartBadge Add-in Registration for 64-bit Office
|
||||
; Generated from working installation reference
|
||||
|
||||
; === Excel Add-ins ===
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Excel\Addins\Datto.SmartBadgeShim]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Excel\Addins\Datto.SmartBadgeShim_CC]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
; === Word Add-ins ===
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\Datto.SmartBadgeShim]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\Datto.SmartBadgeShim_CC]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
; === PowerPoint Add-ins ===
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\PowerPoint\Addins\Datto.SmartBadgeShim]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\PowerPoint\Addins\Datto.SmartBadgeShim_CC]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
; === WOW6432Node (32-bit compatibility layer) ===
|
||||
[HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Office\Excel\Addins\Datto.SmartBadgeShim]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Office\Excel\Addins\Datto.SmartBadgeShim_CC]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Office\Word\Addins\Datto.SmartBadgeShim]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Office\Word\Addins\Datto.SmartBadgeShim_CC]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Office\PowerPoint\Addins\Datto.SmartBadgeShim]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\Office\PowerPoint\Addins\Datto.SmartBadgeShim_CC]
|
||||
"FriendlyName"="Datto SmartBadge"
|
||||
"Description"="SmartBadge for Microsoft Office applications."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
; === COM CLSID Registration (64-bit shim DLL) ===
|
||||
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2B96EDC1-FDF3-47E1-B177-F205E7B98DF4}]
|
||||
@="Datto.SmartBadgeShim"
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2B96EDC1-FDF3-47E1-B177-F205E7B98DF4}\InprocServer32]
|
||||
@="C:\\Program Files\\Datto\\Workplace Desktop\\SmartBadge\\DattoSmartBadgeShim_x64.dll"
|
||||
"ThreadingModel"="Both"
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{2B96EDC1-FDF3-47E1-B177-F205E7B98DF4}\ProgID]
|
||||
@="Datto.SmartBadgeShim"
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3C639243-95A2-400D-B4B4-4384DA7F61D3}]
|
||||
@="Datto.SmartBadgeShim_CC"
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3C639243-95A2-400D-B4B4-4384DA7F61D3}\InprocServer32]
|
||||
@="C:\\Program Files\\Datto\\Workplace2\\SmartBadge\\DattoSmartBadgeShim_x64.dll"
|
||||
"ThreadingModel"="Both"
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3C639243-95A2-400D-B4B4-4384DA7F61D3}\ProgID]
|
||||
@="Datto.SmartBadgeShim_CC"
|
||||
|
||||
; === Outlook Plugin (if needed) ===
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\Datto.OutlookPluginShim]
|
||||
"FriendlyName"="Datto Outlook Plugin"
|
||||
"Description"="Datto add-in for Microsoft Outlook."
|
||||
"LoadBehavior"=dword:00000003
|
||||
|
||||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\Datto.OutlookPluginShim_CC]
|
||||
"FriendlyName"="Datto Outlook Plugin"
|
||||
"Description"="Datto add-in for Microsoft Outlook."
|
||||
"LoadBehavior"=dword:00000003
|
||||
5375
projects/msp-tools/scripts/perms.json
Normal file
5375
projects/msp-tools/scripts/perms.json
Normal file
File diff suppressed because it is too large
Load Diff
639
projects/msp-tools/scripts/sam.json
Normal file
639
projects/msp-tools/scripts/sam.json
Normal file
@@ -0,0 +1,639 @@
|
||||
{
|
||||
"isFallbackPublicClient": true,
|
||||
"signInAudience": "AzureADMultipleOrgs",
|
||||
"displayName": "CIPP-SAM",
|
||||
"web": {
|
||||
"redirectUris": [
|
||||
"https://login.microsoftonline.com/common/oauth2/nativeclient",
|
||||
"https://localhost",
|
||||
"http://localhost",
|
||||
"http://localhost:8400"
|
||||
]
|
||||
},
|
||||
"servicePrincipalLockConfiguration": {
|
||||
"isEnabled": true,
|
||||
"allProperties": true
|
||||
},
|
||||
"requiredResourceAccess": [
|
||||
{
|
||||
"resourceAppId": "c5393580-f805-4401-95e8-94b7a6ef2fc2",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "594c1fb6-4f81-4475-ae41-0c394909246c",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "aeb86249-8ea3-49e2-900b-54cc8e308f85",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "fc946a4f-bc4d-413b-a090-b2c86113ec4f",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "00000003-0000-0000-c000-000000000000",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "b0afded3-3588-46d8-8b3d-9842eff778da",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "5e1e9171-754d-478c-812c-f1755a9a4c2d",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "f3a65bd4-b703-46df-8f7e-0174fea562aa",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "59a6b24b-4225-4393-8165-ebaec5f55d7a",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "35930dcf-aceb-4bd1-b99a-8ffed403c974",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "cac88765-0581-4025-9725-5ebc13f729ee",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "1138cb37-bd11-4084-a2b7-9f71582aeddb",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "78145de6-330d-4800-a6ce-494ff2d33d07",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "9241abd9-d0e6-425a-bd4f-47ba86e767a4",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "5b07b0dd-2377-4e44-a38d-703f09a0dc3c",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "243333ab-4d21-40cb-a475-36241daa0842",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "e330c4f0-4170-414e-a55a-2f022ec2b57b",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "9255e99d-faf5-445e-bbf7-cb71482737c4",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "8b9d79d0-ad75-4566-8619-f7500ecfcebe",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "5ac13192-7ace-4fcf-b828-1a26f28068ee",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "19dbc75e-c2e2-444c-a770-ec69d8559fc7",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "dbb9058a-0e50-45d7-ae91-66909b5d4664",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "75359482-378d-4052-8f01-80520e7db3cd",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "bf7b1a76-6e77-406b-b258-bf5c7720e98f",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "62a82d76-70ea-41e2-9197-370581804d09",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "dbaae8cf-10b5-4b86-a4a1-f871c94c6695",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "19da66cb-0fb0-4390-b071-ebc76a349482",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "6931bccd-447a-43d1-b442-00a195474933",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "292d869f-3427-49a8-9dab-8c70152b74e9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2cb92fee-97a3-4034-8702-24a6f5d0d1e9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "b6890674-9dd5-4e42-bb15-5af07f541ae1",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "913b9306-0ce1-42b8-9137-6a7df690a760",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "246dd0d5-5bd0-4def-940b-0421030a5b68",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "be74164b-cff1-491c-8741-e671cb536e13",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "25f85f3c-f66c-4205-8cd5-de92dd7f0cec",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "29c18626-4985-4dcd-85c0-193eef327366",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "01c0a623-fc9b-48e9-b794-0756f8e8f067",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "999f8c63-0a38-4f1b-91fd-ed1947bdd1a9",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "338163d7-f101-4c92-94ba-ca46fe52447c",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2f6817f8-7b12-4f0f-bc18-eeaf60705a9e",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "230c1aed-a721-4c5d-9cb4-a90514e508ef",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2a60023f-3219-47ad-baa4-40e17cd02a1d",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "025d3225-3f02-4882-b4c0-cd5b541a4e80",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "04c55753-2244-4c25-87fc-704ab82a4f69",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "bf394140-e372-4bf9-a898-299cfc7564e5",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "34bf0e97-1971-4929-b999-9e2442d941d7",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "19b94e34-907c-4f43-bde9-38b1909ed408",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "a82116e5-55eb-4c41-a434-62fe8a61c773",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "0121dc95-1b9f-4aed-8bac-58c5ac466691",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "4437522e-9a86-4a41-a7da-e380edd4a97d",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "741f803b-c850-494e-b5df-cde7c675a1ca",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "50483e42-d915-4231-9639-7fdb7fd190e5",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "bdfbf15f-ee85-4955-8675-146e8e5296b5",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "84bccea3-f856-4a8a-967b-dbe0a3d53a64",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b27a61ec-b99c-4d6a-b126-c4375d08ae30",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "101147cf-4178-4455-9d58-02b5c164e759",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "cc83893a-e232-4723-b5af-bd0b01bcfe65",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "9d8982ae-4365-4f57-95e9-d6032a4c0b87",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2eadaff8-0bce-4198-a6b9-2cfc35a30075",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0c3e411a-ce45-4cd1-8f30-f99a3efa7b11",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2b61aa8a-6d36-4b2f-ac7b-f29867937c53",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "767156cb-16ae-4d10-8f8b-41b657c8c8c8",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "ebf0f66e-9fb1-49e4-a278-222f76911cf4",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "d649fb7c-72b4-4eec-b2b4-b15acf79e378",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "f3bfad56-966e-4590-a536-82ecf548ac1e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "885f682f-a990-4bad-a642-36736a74b0c7",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "41ce6ca6-6826-4807-84f1-1c82854f7ee5",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "bac3b9c2-b516-4ef4-bd3b-c2ef73d8d804",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "11d4cd79-5ba5-460f-803f-e22c8ab85ccd",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "951183d1-1a61-466f-a6d1-1fde911bfd95",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "280b3b69-0437-44b1-bc20-3b2fca1ee3e9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7b3f05d5-f68c-4b8d-8c59-a2ecd12f24af",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0883f392-0a7a-443d-8c76-16a6d39c7b63",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "3404d2bf-2b13-457e-a330-c24615765193",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "44642bfe-8385-4adc-8fc6-fe3cb2c375c3",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0c5e8a55-87a6-4556-93ab-adc52c4d862d",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "662ed50a-ac44-4eef-ad86-62eed9be2a29",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0e263e50-5827-48a4-b97c-d940288653c7",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "c5366453-9fb0-48a5-a156-24f0c49a4b84",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2f9ee017-59c1-4f1d-9472-bd5529a7b311",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4e46008b-f24c-477d-8fff-7bb4ec7aafe0",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "f81125ac-d3b7-4573-a3b2-7099cc39df9e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "9e4862a5-b68f-479e-848a-4e07e25c9916",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "bb6f654c-d7fd-4ae3-85c3-fc380934f515",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e0a7cdbb-08b0-4697-8264-0069786e9674",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e383f46e-2787-4529-855e-0e479a3ffac0",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a367ab51-6b49-43bf-a716-a1fb06d2a174",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "818c620a-27a9-40bd-a6a5-d96f7d610b4b",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "f6a3db3e-f7e8-4ed2-a414-557c8c9830be",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7427e0e9-2fba-42fe-b0c0-848c9e6a8182",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "37f7f235-527c-4136-accd-4a02d197296e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "46ca0847-7e6b-426e-9775-ea810a948356",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "346c19ff-3fb2-4e81-87a0-bac9e33990c1",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "e67e6727-c080-415e-b521-e3f35d5248e9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4c06a06a-098a-4063-868e-5dfee3827264",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "572fea84-0151-49b2-9301-11cb16974376",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b27add92-efb2-4f16-84f5-8108ba77985c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "edb72de9-4252-4d03-a925-451deef99db7",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7e823077-d88e-468f-a337-e18f1f0e6c7c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "edd3c878-b384-41fd-95ad-e7407dd775be",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "ad902697-1014-4ef5-81ef-2b4301988e8c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4d135e65-66b8-41a8-9f8b-081452c91774",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "40b534c3-9552-4550-901b-23879c90bcf9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a8ead177-1889-4546-9387-f25e658e2a79",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a84a9652-ffd3-496e-a991-22ba5529156a",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "14dad69e-099b-42c9-810b-d002981feec1",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "02e97553-ed7b-43d0-ab3c-f8bace0d040c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b955410e-7715-4a88-a940-dfd551018df3",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "d01b97e9-cbc0-49fe-810a-750afd5527a3",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "dc38509c-b87d-4da0-bd92-6bec988bac4a",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "6aedf524-7e1c-45a7-bd76-ded8cab8d0fc",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "128ca929-1a19-45e6-a3b8-435ec44a36ba",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "55896846-df78-47a7-aa94-8d3d4442ca7f",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "eda39fa6-f8cf-4c3c-a909-432c683e4c9b",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "aa07f155-3612-49b8-a147-6c590df35536",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "89fe6a52-be36-487e-b7d8-d061c450a026",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "485be79e-c497-4b35-9400-0e3fa7f2a5d4",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "4a06efd2-f825-4e34-813e-82a57b03d1ee",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2104a4db-3a2f-4ea0-9dba-143d457dc666",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0e755559-83fb-4b44-91d0-4cc721b9323e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "39d65650-9d3e-4223-80db-a335590d027e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "a9ff19c2-f369-4a95-9a25-ba9d460efc8e",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b98bfd41-87c6-45cc-b104-e2de4f0dafb9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "cac97e40-6730-457d-ad8d-4852fddab7ad",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "73e75199-7c3e-41bb-9357-167164dbb415",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "637d7bec-b31e-4deb-acc9-24275642a2c9",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "204e0828-b5ca-4ad8-b9f3-f32a958e7cc4",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "48971fc1-70d7-4245-af77-0beb29b53ee2",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "b7887744-6746-4312-813d-72daeaee7e2d",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "424b07a8-1209-4d17-9fe4-9018a93a1024",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "0a42382f-155c-4eb1-9bdc-21548ccaa387",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "2d9bd318-b883-40be-9df7-63ec4fcdc424",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "c8948c23-e66b-42db-83fd-770b71ab78d2",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "a94a502d-0281-4d15-8cd2-682ac9362c4c",
|
||||
"type": "Role"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "fa3d9a0c-3fb0-42cc-9193-47c7ecd2edbd",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "1cebfa2a-fb4d-419e-b5f9-839b4383e05a",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "dc50a0fb-09a3-484d-be87-e023b12c6440",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "ef54d2bf-783f-4e0f-bca1-3210c0444d99",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "f9156939-25cd-4ba8-abfe-7fabcf003749",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "ab4f2b77-0b06-4fc1-a9de-02113fc2ab7c",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "bbd1ca91-75e0-4814-ad94-9c5dbbae3415",
|
||||
"type": "Scope"
|
||||
},
|
||||
{
|
||||
"id": "2e83d72d-8895-4b66-9eea-abb43449ab8b",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "00000003-0000-0ff1-ce00-000000000000",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "56680e0d-d2a3-4ae1-80d8-3c4f2100e3d0",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "48ac35b8-9aa8-4d74-927d-1f4a14a0b239",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "e60370c1-e451-437e-aa6e-d76df38e5f15",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"resourceAppId": "fc780465-2017-40d4-a0c5-307022471b92",
|
||||
"resourceAccess": [
|
||||
{
|
||||
"id": "41269fc5-d04d-4bfd-bce7-43a51cea049a",
|
||||
"type": "Role"
|
||||
},
|
||||
{
|
||||
"id": "63a677ce-818c-4409-9d12-5c6d2e2a6bfe",
|
||||
"type": "Scope"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
Reference in New Issue
Block a user