powershell - 我想用所有 Azure AD 应用程序创建一个输出，它返回 a) 全部列表 b) 过期应用程序列表

Question

这是我到目前为止所拥有的，但是 $expirationlist 不会返回所有使用 $expirationlist 变量到期的应用程序的列表。

$date= get-date
$expirationdate= $date.AddDays(30)
$ADApplications = Get-AzADApplication 
$result = foreach ($application in $ADApplications)
{
$credentials = Get-AzADAppCredential -ApplicationId 
$application.ApplicationId 
$StartDate = $credentials.StartDate
$EndDate = $credentials.EndDate



[PSCustomObject]@{
    ApplicationName = $application.DisplayName
    ApplicationID = $application.ApplicationId
    ObjectID = $application.ObjectId
    CreationDate = $StartDate
    ExpirationDate = $EndDate
   

}
if($EndDate -lt $expirationdate)
   {
        $expirationlist = [PSCustomObject]@{
       ApplicationName = $application.DisplayName
       ApplicationID = $application.ApplicationId
        ObjectID = $application.ObjectId
        CreationDate = $StartDate
        ExpirationDate = $EndDate  
        }
    }
}
$expirationlist

Answer 1

该错误来自PSCustomObject使用$null密钥铸造 a ：

例子：

PS /> [pscustomobject]@{ $null = 'asd' }
A null key is not allowed in a hash literal.
At line:1 char:19
+ [pscustomobject]@{ $null = 'asd' }
+                    ~~~~~
    + CategoryInfo          : InvalidOperation: (System.Collecti...deredDictionary:OrderedDictionary) [], RuntimeException
    + FullyQualifiedErrorId : InvalidNullKey

由于未定义这些变量，因此它们基本上为空：

$ApplicationName, $ApplicationID,$ObjectID等

试试这个，它应该可以工作，我还添加了一个小的效率改进：

$ADApplications = Get-AzADApplication
$result = foreach ($application in $ADApplications)
{
    $credentials = Get-AzADAppCredential -ApplicationId $application.ApplicationId 
    
    foreach($credential in $credentials)
    {
        $StartDate = $credential.StartDate
        $EndDate = $credential.EndDate
    
        [PSCustomObject]@{
            ApplicationName = $application.DisplayName
            ApplicationID = $application.ApplicationId
            ObjectID = $application.ObjectId
            CreationDate = $StartDate
            ExpirationDate = $EndDate
        }
    }
}

$result | Where-Object {[datetime]$_.EndDate -lt [datetime]::Now.AddDays(30)}