IntuneDeviceConfigurationPolicyAndroidDeviceOwner: Credential Parameter as String in Export

[andikrueger]

Details of the scenario you tried and the problem that is occurring

1. Export settings
   The export of the resource does not generate a well formatted configuration. This configuration cannot be applied to a tenant. The parameter Credential is of type string rather than PSCredential. This breaks the configuration.

Verbose logs showing the problem

Suggested solution to the issue

Change Credential Param in Exported configuration object.

Version of the DSC module that was used ('dev' if using current dev branch)

1.22.831.1

[William-Francillette]

Hi @andikrueger
Not sure how this is supposed to look but after rebuilding the resource I still get the credentials as a PSCredential

[andikrueger]

The issue are the quotation marks in the configuration part of this resource. The credentials should be the variable only and not a string…

[andikrueger]

@William-Francillette Were you able to investigate this one any further?

[William-Francillette]

@William-Francillette Were you able to investigate this one any further?

@andikrueger,
I found the problem: it resides in Convert-DSCStringParamToVariable called from Get-M365DSCExportContentForResource inside export-TargetResource

In Convert-DSCStringParamToVariable (ReverseDSC.Core.psm) :

$startPosition = -1
do
{
    $startPosition = $DSCBlock.IndexOf($ParameterName, $startPosition + 1)
    $testValidStartPositionEqual = $DSCBlock.IndexOf("=", $startPosition)
    $testValidStartPositionQuotes = $DSCBlock.IndexOf("`"", $startPosition)
} while ($testValidStartPositionEqual -gt $testValidStartPositionQuotes -and
    $startPosition -ne -1)

This should return the position of Credential parameter however due to CertificateCredentialConfigurationDisabled it returns the wrong start position and thus the quotes are not removed. ($DSCBlock.IndexOf($ParameterName, $startPosition + 1))

The trick could be instead of using

$partialContent = Convert-DSCStringParamToVariable -DSCBlock $partialContent `
-ParameterName 'Credential'

In Get-M365DSCExportContentForResource (M365DSCUtil.psm) we could use instead

$partialContent = Convert-DSCStringParamToVariable -DSCBlock $partialContent `
-ParameterName 'Credential '

With a space at the end of Credential in the parameter name which would ensure to retrieve the startPosition of the Credential parameter and not any other parameter

[William-Francillette]

@andikrueger, @NikCharlebois
I can include that fix in my next PR if adding the space after Credential is acceptable
I'll try to get it done asap -
My next PR is for adding the assignments attributes for Intune resources and also switching to the beta version some of the resources