Repository navigation
Conversation
…groups Fix: Clear static tenant groups when the selection is empty Synced from CyberDrain/CIPP@9cae7dd
…append Fix: Autopilot device batch appending Synced from CyberDrain/CIPP@2caeef8
Synced from CyberDrain/CIPP@2d5421b
feat: add new account grace period to MFA users alert Synced from CyberDrain/CIPP@6757246
feat: allow adding multiple members to a SharePoint site at once Synced from CyberDrain/CIPP@854755c
feat: add tenant group selection to GDAP onboarding Synced from CyberDrain/CIPP@8a0dc1d
feat: add SharePoint site membership to user templates Synced from CyberDrain/CIPP@4728da2
Synced from CyberDrain/CIPP@3aaaf77
feat: list Teams channel sites alongside SharePoint sites Synced from CyberDrain/CIPP@8e00372
feat: MCP authentication changes allowing for refresh token and copilot compatibility Synced from CyberDrain/CIPP@727684e
feat(hudu): sync LAPS and BitLocker credentials Synced from CyberDrain/CIPP@cdd33c3
Synced from CyberDrain/CIPP@b3563a1
Synced from CyberDrain/CIPP@77713b9
…60921 chore(openapi): regenerate API spec (2026-09-21) Synced from CyberDrain/CIPP@f684f0e
…update-20260921 chore(permissions): update Entra API permission translator (2026-09-21) Synced from CyberDrain/CIPP@6dd35c9
feat(security simulations): Adds simulator and CA Gap analyser. Synced from CyberDrain/CIPP@d8f452d
Synced from CyberDrain/CIPP@4741ded
Add an "API" filter beside the severity filter in the Logbook Filters panel, each now half-width and side by side. It is a creatable multi-select whose selected values are joined with "|" and passed as the API query param, which Invoke-ListLogs already applies server-side as a regex match on the API column. Wired into the filter summary chip, query key, clear action and help text. Synced from CyberDrain/CIPP@49ad151
The Device Preparation profile's device security group is enrolled through the setEnrollmentTimeDeviceMembershipTarget action, not the enrollment_autopilot_dpp_devicesecuritygroupids settings string, which every create writes regardless of whether a group was ever applied. Adds Get/Set/Remove helpers for the membership target, backed by a CIPP-managed marker for tenants where the retrieve action doesn't route. The baseline and standard now read the applied group live, grade it as a separate dimension from settings, and repair it in place (assign/set) instead of forcing a delete-and-recreate. Also teaches Compare-CIPPIntuneAssignments and Get-CIPPIntuneAssignmentTarget to treat allLicensedUsersAssignmentTarget as equivalent to the All Users group target so a working assignment isn't flagged as drifted. Synced from CyberDrain/CIPP@6035578
Synced from CyberDrain/CIPP@47d79bf
These Exchange template endpoints were serializing the same Name/Comments fields twice when building the stored JSON payload. This change excludes the original properties after aliasing them, preserving the intended template metadata without duplicate keys. Synced from CyberDrain/CIPP@f8da32c
…tor, job, wizard and defaults editors Synced from CyberDrain/CIPP@9647439
…ailing the create Synced from CyberDrain/CIPP@a1dc5bf
…er the first save Synced from CyberDrain/CIPP@07e9ca7
- add a static test that rejects HttpStatusCode OK in entrypoint catch blocks - show the Agent 365 package detail error instead of an empty panel Synced from CyberDrain/CIPP@445e7ca
Synced from CyberDrain/CIPP@b9828e2
Synced from CyberDrain/CIPP@aac78d9
- Package NinjaOne's generic MSI installer; the per-tenant token is passed as TOKENID at install time and accepts CIPP custom variables - Install skips devices already running the NinjaRMMAgent service; detection checks the same service - Replace the unused ninjarmm stub files, whose package info was a copy of Syncro's Fixes #728 Synced from CyberDrain/CIPP@b75ddaf
Synced from CyberDrain/CIPP@650c99f
- Auto-map falls back to an exact HaloPSA client name match when Halo has no Azure tenant ID for a tenant - Runs from the extension timer when HaloPSA is enabled, so new tenants map without visiting the page - Mapping table keeps unsaved local automap rows when the server automap refetch lands Fixes #804 Synced from CyberDrain/CIPP@3664b63
- Matches a tenant's mapped HaloPSA client to the Hudu company synced from it, falling back to an exact company name - Runs from the mapping page and the extension timer, after HaloPSA so new Halo mappings chain through - Registers Hudu sync tasks for newly mapped tenants Fixes #804 Synced from CyberDrain/CIPP@4087420
- List variable type, entered one value per line, expands into the list it is used in - CA deploy resolves user, group and named location names under every replace option and names undefined variables - named location countries and IP ranges can come from list variables - baseline CA template compare resolves custom variables - tests pin the existing variable behaviour Fixes #722 Synced from CyberDrain/CIPP@5bd8596
Feat: Add Teams files policy standard Synced from CyberDrain/CIPP@681b376
…licy Adds ExternalBotAccessMode to the Teams global meeting policy standard: require approval for detected external bots and AI note takers, or allow them like any participant. It defaults to keeping the tenant's current value, so existing baselines do not start enforcing it. Closes #774 Synced from CyberDrain/CIPP@30d4791
OneDrive names a new shortcut after the library and prefixes the site name, so Teams channel shortcuts end up as long strings like "Team - Channel - Documents". The Add OneDrive Shortcut action now takes an optional name, and the shortcut is renamed to it right after creation, because OneDrive ignores the name on create. Names breaking OneDrive's rules (reserved characters, leading or trailing space, trailing period, over 255 characters) are rejected. If the rename fails the shortcut is kept and the result says so. A blank name keeps the default. Closes #853 Synced from CyberDrain/CIPP@bba5201
Graph's message trace API is not offered for GCC tenants, and its "not currently supported" error was returned to the user instead of taking the existing Get-MessageTraceV2 fallback. Treat it like a missing service principal or consent and fall back, without provisioning. Synced from CyberDrain/CIPP@5d27fd1
Synced from CyberDrain/CIPP@e4d1f73
Synced from CyberDrain/CIPP@9683d00
…hurn in the tests run - resolve collectors, prepare hooks and executors with a direct command lookup instead of Get-Command - skip the collector lookup for definitions without a cache type - take a remembered capabilities failure without rethrowing it; pin Test-CIPPStandardLicense behaviour in tests - remember a failed SharePoint root site lookup for two minutes - avoid exception-driven paths in Get-NormalizedError, Get-CippUserAgent, prepare hooks and ZTNA21992 Synced from CyberDrain/CIPP@8a1ece0
The fleet overview mixed every baseline together. It can now be scoped to one baseline, and optionally one of its stages: a tenant's standard counts when that baseline has rolled it out to the tenant (stages up to its current stage, or just the chosen stage). Standards shared by two baselines count toward both, which the page notes. Stored trends are fleet-wide, so the trend chart is hidden while filtered, and a filter with nothing scorable shows a dash instead of 0%. The Alignment tab's by-standard view gets the same filters and reads them from the URL, so the Open Deviations and License Missing tiles carry the filter there. Those tiles passed onClick, which CippInfoBar ignores, so they never navigated; they now use link. ListBaselineAlignment takes optional baselineId and stage parameters with byStandard; the unfiltered response is unchanged. The tenant view's per-baseline score now matches exact standard instances through the same stage helper, so package members count and other baselines' instances no longer skew it. Closes #868 Synced from CyberDrain/CIPP@2ddfefb
Feat: Scope JIT admin approval to specific tenants and tenant groups Synced from CyberDrain/CIPP@1280c64
The push-subscription flow now surfaces browser notification permission denials instead of swallowing them. The preferences page shows a clear status message while waiting for permission and explains how to enable notifications if the browser prompt does not appear. Synced from CyberDrain/CIPP@6d5e904
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.2)
Can you help keep this open source service alive? 💖 Please sponsor : )