AADConditionalAccessPolicy - Issues

[Cyanic-Cloud]

Description of the issue

When using Export-M365DSCConfiguration like below:

Export-M365DSCConfiguration -Components @("AADConditionalAccessPolicy") -ApplicationId $ApplicationId -CertificateThumbprint $CertificateThumbprint -TenantId $TenantId

The following objects are not auto populating with required values

IncludeExternalTenantsMembershipKind = "";
ExcludeExternalTenantsMembershipKind = "";

Is it possible to not make this a required variable or auto populate with unknownFutureValue, as currently I now get an error in my pipeline as I dont populate this variable in my base config:

If I populate both IncludeExternalTenantsMembershipKind AND ExcludeExternalTenantsMembershipKind with unknownFutureValue the compilation runs fine.

Microsoft 365 DSC Version

1.24.214.2

Which workloads are affected

Azure Active Directory

The DSC configuration

No response

Verbose logs showing the problem

No response

Environment Information + PowerShell Version

No response

[sachabruttin]

Empty string value has been removed on this PR #4322 / Commit
32fa1cc

When I export my Conditional Access with

> $policy = Get-MgBetaIdentityConditionalAccessPolicy -Filter "DisplayName eq '$DisplayName'"

The value I get is empty.

> $policy.Conditions.Users.ExcludeGuestsOrExternalUsers.ExternalTenants

MembershipKind
--------------

> $policy.Conditions.Users.ExcludeGuestsOrExternalUsers.ExternalTenants.MembershipKind -eq $null
True

Please allow the properties IncludeExternalTenantsMembershipKind and ExcludeExternalTenantsMembershipKind the have empty value/$null value.

[ricmestre]

@ykuijs Hi, could you please look into this? According to https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccessexternaltenants?view=graph-rest-beta these properties only allow all, enumerated, unknownFutureValue but the API still can return $null and with your diff this now makes the resource fail when this case happens.

[Cyanic-Cloud]

Thanks @NikCharlebois, much appreciated 🚀