scheduler stuff

RemoveQueuedAlert/function.json

@@ -0,0 +1,19 @@
+{
+  "bindings": [
+    {
+      "authLevel": "anonymous",
+      "type": "httpTrigger",
+      "direction": "in",
+      "name": "Request",
+      "methods": [
+        "get",
+        "post"
+      ]
+    },
+    {
+      "type": "http",
+      "direction": "out",
+      "name": "Response"
+    }
+  ]
+}

RemoveQueuedAlert/run.ps1

@@ -0,0 +1,27 @@
+using namespace System.Net
+
+# Input bindings are passed in via param block.
+param($Request, $TriggerMetadata)
+
+$APIName = $TriggerMetadata.FunctionName
+Log-Request -user $request.headers.'x-ms-client-principal' -API $APINAME  -message "Accessed this API" -Sev "Debug"
+
+$user = $request.headers.'x-ms-client-principal'
+$ID = $request.query.id
+try {
+    Remove-Item "Cache_Scheduler\$($ID).alert.json" -Force
+    Log-Request -user $request.headers.'x-ms-client-principal'  -API $APINAME  -message "Removed application queue for $ID." -Sev "Info"
+    $body = [pscustomobject]@{"Results" = "Successfully removed from queue." }
+}
+catch {
+    Log-Request -user $request.headers.'x-ms-client-principal'  -API $APINAME  -message "Failed to remove from queue $ID. $($_.Exception.Message)" -Sev "Error"
+    $body = [pscustomobject]@{"Results" = "Failed to remove alert from queue" }
+}
+
+
+# Associate values to output bindings by calling 'Push-OutputBinding'.
+Push-OutputBinding -Name Response -Value ([HttpResponseContext]@{
+        StatusCode = [HttpStatusCode]::OK
+        Body       = $body
+    })
+

Scheduler_Alert/run.ps1

@@ -1,10 +1,20 @@
 param($tenant)
 
 try {
-    $Alerts = Get-Content ".\Cache_Scheduler\$tenant.alert.json" | ConvertFrom-Json
-    switch ($Alerts) {
-
-        { $_."AdminPassword" -eq $true } {}
+    if ($Tenant.tag -eq "AllTenants") {
+        $Alerts = Get-Content ".\Cache_Scheduler\AllTenants.alert.json" | ConvertFrom-Json
+    }
+    else {
+        $Alerts = Get-Content ".\Cache_Scheduler\$($tenant.tenant).alert.json" | ConvertFrom-Json
+    }
+    #Does not work yet.
+    $ShippedAlerts = switch ($Alerts) {
+        { $_."AdminPassword" -eq $true } {
+            New-GraphGETRequest -uri "https://graph.microsoft.com/beta/roleManagement/directory/roleAssignments?`$filter=roleDefinitionId eq '62e90394-69f5-4237-9190-012177145e10'" -tenantid $($tenant.tenant) | ForEach-Object { 
+                $LastChanges = New-GraphGETRequest -uri "https://graph.microsoft.com/beta/roleManagement/users/$($_.PrincipalID)/`$select=UserPrincipalName,lastPasswordChangeDateTime" -tenant $($tenant.tenant)
+                if ($LastChanges.LastPasswordChangeDateTime -lt (Get-Date).AddDays(-300)) { Write-Host "Admin password has been changed for $($LastChanges.UserPrincipalName) in last 24 hours" }
+            }
+        }
         { $_."DefenderMalware" -eq $true } {}
         { $_."DefenderStatus" -eq $true } {}
         { $_."DisableRestart" -eq $true } {}
@@ -16,12 +26,14 @@ try {
         { $_."NewRole" -eq $true } {}
         { $_."QuotaUsed" -eq $true } {}
         { $_."UnusedLicenses" -eq $true } {}
-
     }
+    Write-Host "Shipped in switch."
+    Write-Host $ShippedAlerts
 
-    Log-request -API "Scheduler" -tenant $tenant -message "Collecting alerts for $($tenant)" -sev debug
+    #EmailAllAlertsInNiceTable
+    Log-request -API "Scheduler" -tenant $($tenant.tenant) -message "Collecting alerts for $($($tenant.tenant))" -sev debug
 
 }
 catch {
-    Log-request -API "Scheduler" -tenant $tenant -message "Failed to get alerts for $($tenant) Error: $($_.exception.message)" -sev Error
+    Log-request -API "Scheduler" -tenant $($tenant.tenant) -message "Failed to get alerts for $($($tenant.tenant)) Error: $($_.exception.message)" -sev Error
 }

Scheduler_GetQueue/run.ps1

@@ -15,6 +15,7 @@ $object = foreach ($Tenant in $tenants) {
         get-tenants | ForEach-Object {
             [pscustomobject]@{ 
                 Tenant = $_.defaultDomainName
+                Tag    = "AllTenants"
                 Type   = $Typefile.Type
             }
         }

Scheduler_Orchestration/run.ps1

@@ -6,7 +6,7 @@ New-Item "Cache_Scheduler\CurrentlyRunning.txt" -ItemType File -Force
 
 $Batch = (Invoke-DurableActivity -FunctionName 'Scheduler_GetQueue' -Input 'LetsGo')
 $ParallelTasks = foreach ($Item in $Batch) {
-  Invoke-DurableActivity -FunctionName "Scheduler_$($item['Type'])" -Input $item['Tenant'] -NoWait
+  Invoke-DurableActivity -FunctionName "Scheduler_$($item['Type'])" -Input $item -NoWait
 }
 
 $Outputs = Wait-ActivityFunction -Task $ParallelTasks

Scheduler_Timer/function.json

@@ -2,7 +2,7 @@
   "bindings": [
     {
       "name": "Timer",
-      "schedule": "0 */15 * * * *",
+      "schedule": "0 */1 * * * *",
       "direction": "in",
       "type": "timerTrigger"
     },