microsoft
MSFT_AccessPackageResourceRoleScope guid issues
Description of the issue
I'm on the latest version of DSC but having the same issue as detailed here:-
https://github.com/microsoft/Microsoft365DSC/issues/4032
Clearly something is not happy between the displaynames and GUID IDs.
I can export and view valid code, my compiled mof looks the same. How is the id created ?
AccessPackageResourceOriginId = 'group guid' AccessPackageResourceRoleDisplayName = 'member' ID = 'either exported GUID' or 'self generated'
Manually adding the resources works and the resources are in the catalog from the access package catalog code.
Ideally I would like to add a list of groups using the member and group GUID without the id guid_guid if that's possible.
I've tried seemingly every combination but just get the not valid guid error when applying.
Microsoft 365 DSC Version
V1.25.6.111.1
Which workloads are affected
Azure Active Directory (Entra ID)
The DSC configuration
Verbose logs showing the problem
Environment Information + PowerShell Version
Found the issue. You CANNOT use the name of the Catalog Displayname in CatalogID. It needs to be the GUID otherwise it will remove all the Resources in the access package. Even if you do not specify any Access Package resource Roles it still scrubs the resources. You do not need to specify the ID for the access package and you do not need to specify the ID (GUID_GUID) for the Resource Roles just member and the group GUID from my testing. You then get an access package with resources and code that works across tenants. (obviously with GUID changes for the Entitlement Catalog and Groups)
