Skip to main content
Version: 2.1.0

Test-MtGsaForwardingProfileAssignmentNotNested

SYNOPSIS​

Checks if groups assigned to Global Secure Access traffic forwarding profiles use direct membership (no nested groups).

SYNTAX​

Test-MtGsaForwardingProfileAssignmentNotNested [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

Global Secure Access traffic forwarding profiles (Microsoft 365, Internet, and Private Access) can be scoped to specific users and groups. Microsoft does not support nested group membership for this assignment - a user must be a DIRECT member of the assigned group to receive the profile (and therefore the Global Secure Access client routing). A nested assignment group silently leaves part of the intended population without the profile.

Traffic forwarding profiles are represented by service principals whose display name ends with 'trafficforwardingprofile'; their user and group assignments are exposed as app role assignments.

EXAMPLES​

EXAMPLE 1​

Test-MtGsaForwardingProfileAssignmentNotNested

Returns $true if no group assigned to a traffic forwarding profile contains a nested group.

PARAMETERS​

-ProgressAction​

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtGsaForwardingProfileAssignmentNotNested