AADConditionalAccessPolicy - Invalid Users or Groups still commit change

[NikCharlebois]

Description of the issue

If an invalid user or group name is passed in one of the parameters (e.g., ExcludedGroups), M365DSC logs an error, and moves on to the next group. This could cause an issue where if no valid groups are specified, that the API will be called with an empty array, effectively clearing the value for the parameter on the tenant.

Microsoft 365 DSC Version

1.24.214.2

Which workloads are affected

Azure Active Directory

The DSC configuration

No response

Verbose logs showing the problem

No response

Environment Information + PowerShell Version

No response