search

microsoft / Partner-Center-PowerShell

PowerShell module for managing Partner Center resources.
https://docs.microsoft.com/powershell/partnercenter/
MIT License
130 stars 59 forks source link

Need to be able to utilize Powershell Commands without tenant admin account (GDAP) #421

Open HPT-CGM opened 7 months ago

HPT-CGM commented 7 months ago

Steps to reproduce

I was directed here by Microsoft Support, although I do think that was a mistake on their part......

Issue is that we have recently implemented the new GDAP system and we need to be able to manage all of our client tenants without using a set of admin credentials specific to each tenant.

What steps can reproduce the defect? Please share the setup, commandline for vstest.console, sample project, target framework etc.

Example, if we run the following to manage a client's calendar permissions, we cannot use our own tenant logins to do that despite having GDAP permissions set for Exchange. We still are required to use our admin account in that client's tenant to manage those permissions.

Connect-ExchangeOnline -UserPrincipalName admin@client.com

Get-MailboxFolderPermission user1@client.com:\calendar

Add-MailboxFolderPermission -Identity user1@client.com:\calendar -user user2@client.com -AccessRights PublishingEditor

Add-MailboxFolderPermission -Identity user1@client.com:\calendar -user user3@client.com -AccessRights PublishingEditor

Disconnect-ExchangeOnline

Expected behavior

Prompt for our login, followed by a successful command execution.

Actual behavior

Prompt for login, but requires client tenant, and the command will fail if we use our own.

Diagnostic logs

Please share test platform diagnostics logs.
The logs may contain test assembly paths, kindly review and mask those before sharing.

Environment

Please share additional details about your environment. Version

Please let me know what all we need to do here.