• 4.2.0 6bf7345eb7

    tomas.kracmar released this 2026-07-07 12:57:08 +00:00 | 6 commits to main since this release

    This release adds a new reporting tool for Entra directory roles and wires it into the unified launcher.

    What's new

    • Scripts/Export-EntraRoleMembership.ps1 — exports all active and PIM-eligible Microsoft Entra directory role memberships to CSV, including transitive expansion of group-assigned roles. Each row is marked as privileged or not.

      • Supports AppOnly, Browser, and DeviceCode auth.
      • Reads saved credentials from Settings.json / macOS Keychain when running in AppOnly mode.
      • Handles missing PIM licenses and insufficient permissions gracefully.
    • Start-IntuneToolkit.ps1 — added menu item 20. Export Entra role membership that prompts for the CSV output path and launches the new script.

    Documentation

    • README.md and AGENTS.md now list the new script in the entry points.
    • CHANGELOG_macOS_IntuneToolkit.md has a dedicated entry for this release.

    Repository hygiene

    • .gitignore updated to ignore the local accounts/ folder and stray operational shell scripts (deploy.sh, restart_gateways.sh).

    Notes

    This release also includes everything shipped in 4.1.0 and the two follow-up commits on main:

    • Expanded Export-SettingsReport.py coverage and a new Invoke-ConditionalAccessDocumentation.ps1.
    • Platform column in settings reports and cleanup of Windows-specific artifacts.
    Downloads