search

microsoft / EntraExporter

PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.
https://aka.ms/EntraExporter
MIT License
572 stars 92 forks source link

Some CA Policies missing in the export #35

Closed zupermik closed 1 year ago

zupermik commented 2 years ago

Greetings!

Unfortunately, one of my two CA policies were missing in the export. I have a really small test environment for tests where I am looking into the azureadexporter.

I tried with -All as well as "-Type "ConditionalAccess" and default with same result.

Thanks for a cool and needed exporter!

merill commented 2 years ago

@zupermik can you share some details on the CA policy that you created which is not being exported?

zupermik commented 2 years ago

@merill I have created a policy identical to the one that's not exporting, and this new policy is exported. The policy that doesn't export is the first policy I created in my tenant.

The two identical policies include - one user - one enterprise app - 1 included and 4 excluded device platform - grant MFA + compliant device.

I have updated the policy that doesn't export and still the same behavior.

Thanks for your support!

BT-ITA-Olaf commented 1 year ago

Hi,

We are facing the same issue. Our missing policy has all the users, all the cloud apps, four conditions and grant MFA + compliant device. Any update on how to fix it?

Thank you!

merill commented 1 year ago

The export is using the v1 endpoint but it looks like a recent change to the API is excluding certain policies from v1 if they are using beta features. I'll release a fix soon to switch to the beta endpoint (and also make it a config option).

zupermik commented 1 year ago

@merill Thanks!

admingashvmb commented 1 year ago

@merill Is this issue fixed?

I am trying to use this Tool and facing couple of issues that are mentioned here:

  1. Where there is multiple control selected then in the exported json it shows as "Null".
  2. Some of the policies are not getting exported. I Created a policy from template which did not export however when i created another policy with the same settings with a different name it got exported.
  3. Some Policy got exported but when i try to restore them i get the following error: ""1007: Incoming ConditionalAccessPolicy object is null or does not match the schema of ConditionalAccessPolicy type." And there is nothing in the audit logs that can gives more details of the issue.
merill commented 1 year ago

Very sorry about the delay in this folks. The issue has been fixed. Please download the new EntraExporter module