marco/Intune-Manager
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 11 Wiki Activity

Policies: Admin-Vorlagen-Export ohne verschachtelten $expand (MaxExpansionDepth=1)

Browse Source 
Graph lehnt definitionValues?$expand=...,presentationValues($expand=presentation)
mit 400 ab ("$expand path too deep, max 1"). Jetzt definitionValues nur mit
'definition' expandieren (Tiefe 1) und presentationValues je definitionValue
separat mit 'presentation' nachladen (jeweils Tiefe 1). Liefert dieselben Daten
für den Re-Import (definition.id, presentation.id, value/values).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
marco
2026-09-23 09:05:34 +02:00
co-authored by Claude Opus 4.8
parent b58aa1fde3
commit ead650d326
1 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/PolicyIO.ps1
+16 -2
View File
@@ -236,10 +236,24 @@ function Get-GraphPolicyDetail {
# (definitionValues inkl. Definition + Presentation-Werten) separat expandieren.
# -AsRawJson durchgaengig: bewahrt Ein-Element-Collections als Array (PS-5.1-
# Hashtable-Modus wuerde sie skalarisieren -> 400 beim Re-Import).
# WICHTIG: presentationValues($expand=presentation) waere ein VERSCHACHTELTER
# Expand (Tiefe 2) -> Graph lehnt mit 400 ab ("$expand path too deep, max 1").
# Deshalb definitionValues nur mit 'definition' expandieren (Tiefe 1) und die
# presentationValues je definitionValue separat mit 'presentation' nachladen.
if ($cfg.Key -eq 'administrativetemplate') {
$base = Invoke-MgGraphRequestRetry -Uri "https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/$Id" -Method GET -AsRawJson
$dvUri = "https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/$Id/definitionValues?`$expand=definition(`$select=id,classType,displayName,policyType,version),presentationValues(`$expand=presentation)"
$cfgRoot = "https://graph.microsoft.com/beta/deviceManagement/groupPolicyConfigurations/$Id"
$base = Invoke-MgGraphRequestRetry -Uri $cfgRoot -Method GET -AsRawJson
$dvUri = "$cfgRoot/definitionValues?`$expand=definition(`$select=id,classType,displayName,policyType,version)"
$dvs = @(Get-GraphPaged -Uri $dvUri -AsRawJson)
foreach ($dv in $dvs) {
if (-not $dv) { continue }
$dvId = [string](Get-PolicyProp $dv 'id')
if (-not $dvId) { continue }
$pvUri = "$cfgRoot/definitionValues/$dvId/presentationValues?`$expand=presentation"
$pvs = @(Get-GraphPaged -Uri $pvUri -AsRawJson)
if ($dv -is [System.Collections.IDictionary]) { $dv['presentationValues'] = $pvs }
else { $dv | Add-Member -NotePropertyName presentationValues -NotePropertyValue $pvs -Force }
}
if ($base -is [System.Collections.IDictionary]) { $base['definitionValues'] = $dvs }
else { $base | Add-Member -NotePropertyName definitionValues -NotePropertyValue $dvs -Force }
return $base