microsoftgraph / microsoftgraph/msgraph-sdk-powershell
Add support for Non-Interactive sign-in in Get-MgAuditLogSignIn
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 898
- Forks
- 230
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 31
Description
Is your feature request related to a problem? Please describe the problem.
Not a direct problem, can be workaround with Get-MgBetaAuditLogSignIn
Get-MgAuditLogSignIn : Invalid filter clause
Describe the solution you'd like.
Add an Attribute in Get-MgAuditLogSignIn instead of a Filter in Get-MgBetaAuditLogSignIn
Stable (Request)
- Parameter Option 1: SignInType = [Interactive, NonInteractive, Service principal, Managed Identity, All]
- Parameter Option 2: ShowNonInteractive (isInteractive": false)
Beta (Existing)
$Filter3B = "(signInEventTypes/any(t: t ne 'interactiveUser'))"
$Filter3A = "(signInEventTypes/any(i:i eq 'nonInteractiveUser')) and status/errorCode eq 0"
Get-MgBetaAuditLogSignIn -Filter $Filter3A -Top 10000 -Property *
Additional context?
Get-MgAuditLogSignIn -Filter "signInEventTypes/any(t:t eq 'servicePrincipal')'"
Related to:
https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/2753
https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/956
https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/2753
(https://github.com/microsoftgraph/msgraph-sdk-powershell/issues/1261)
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.beta.reports/get-mgbetaauditlogsignin?view=graph-powershell-beta#example-3-retrieve-the-first-10-sign-ins-where-the-signineventtype-is-not-interactiveuser-starting-with-the-latest-sign-in
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.reports/get-mgauditlogsignin?view=graph-powershell-1.0
https://learn.microsoft.com/en-us/graph/api/signin-get?view=graph-rest-1.0&tabs=http
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with Get-MgAuditLogSignIn and its stable documentation, then compare the beta example and the linked issues about sign-in event filtering. Done means the stable cmdlet supports retrieving non-interactive sign-ins without the beta filter workaround, with the chosen parameter behavior clearly defined.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- powershell
- Domain
- api, cli
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100