microsoftgraph / microsoftgraph/msgraph-sdk-powershell

Add support for Non-Interactive sign-in in Get-MgAuditLogSignIn

Open
#2,901 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Status: Needs Investigation type:feature
Dominant language
C#
Stars
898
Forks
230
Avg merge
2d 5h
Merged PRs (30d)
31

Description

Is your feature request related to a problem? Please describe the problem.

Not a direct problem, can be workaround with Get-MgBetaAuditLogSignIn

Get-MgAuditLogSignIn : Invalid filter clause

Describe the solution you'd like.

Add an Attribute in Get-MgAuditLogSignIn instead of a Filter in Get-MgBetaAuditLogSignIn

Stable (Request)

  • Parameter Option 1: SignInType = [Interactive, NonInteractive, Service principal, Managed Identity, All]
  • Parameter Option 2: ShowNonInteractive (isInteractive": false)

Beta (Existing)
$Filter3B = "(signInEventTypes/any(t: t ne 'interactiveUser'))"
$Filter3A = "(signInEventTypes/any(i:i eq 'nonInteractiveUser')) and status/errorCode eq 0"
Get-MgBetaAuditLogSignIn -Filter $Filter3A -Top 10000 -Property *

Additional context?

Get-MgAuditLogSignIn -Filter "signInEventTypes/any(t:t eq 'servicePrincipal')'"

Related to:
https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/2753
https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/956
https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/2753
(https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/1261)
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.beta.reports/get-mgbetaauditlogsignin?view=graph-powershell-beta#example-3-retrieve-the-first-10-sign-ins-where-the-signineventtype-is-not-interactiveuser-starting-with-the-latest-sign-in
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.reports/get-mgauditlogsignin?view=graph-powershell-1.0
https://learn.microsoft.com/en-us/graph/api/signin-get?view=graph-rest-1.0&tabs=http

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with Get-MgAuditLogSignIn and its stable documentation, then compare the beta example and the linked issues about sign-in event filtering. Done means the stable cmdlet supports retrieving non-interactive sign-ins without the beta filter workaround, with the chosen parameter behavior clearly defined.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell
Domain
api, cli
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.