microsoft/Microsoft365DSC

AADUser resource incomplete

ssoabx opened this issue · 1 comments

ssoabx commented

We would like to set the OtherMails attribute for our emergency access accounts via DSC but the parameter is absent from AADUser resource despite being part of the MgUser command that is used for the other attributes. Is there a specific reason why only some attributes are present as parameters or is it just a maintenance issue (that would be solved once you have DRG in place)? I don't want to open a MR only for it to be rejected but I was not able to find any topics going into this.
Thanks

andikrueger commented

Thanks for reporting and your input about this matter. Indeed there are a few possible explanations why it’s missing:

  1. It was not part of the originally used AzureAD PowerShell cmdLets and was not added during the switch to Microsoft Graph PowerShell
  2. In m365DSC we currently do only implement properties that can be read and updated. If it is a read-only property M365dsc would not export this property.
  3. It got added to Microsoft Graph recently and we did not catch this change.

Could you verify that it’s possible to update the values of this property? If it’s possible and the property can be read it would be great to have this addition as a PR.