Skip to main content
Version: 2.0.1 (preview)

Test-MtServicePrincipalsForAllUsers

SYNOPSISโ€‹

This test checks if you have any third party service principals that are open to all users. It is recommended to set 'Assignment required?' to Yes for all Third Party apps.

SYNTAXโ€‹

Test-MtServicePrincipalsForAllUsers [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTIONโ€‹

Open all app service principals below and set 'Assignment required?' to Yes. Assign users under 'Users and groups' to provide them with explicit access. If desired, use the audit logs per SPN to determine who was using the application before locking them down.

EXAMPLESโ€‹

EXAMPLE 1โ€‹

Test-MtServicePrincipalsForAllUsers

Returns true if no third party service principals are assigned to All Users, false if any are found.

PARAMETERSโ€‹

-ProgressActionโ€‹

{{ Fill ProgressAction Description }}

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParametersโ€‹

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTSโ€‹

OUTPUTSโ€‹

System.Booleanโ€‹

NOTESโ€‹

https://maester.dev/docs/commands/Test-MtServicePrincipalsForAllUsers