Unable to pass powershell variables in graph api body

Question

Hello @Vasil Michev ,

We are trying to pass powerShell variables as part of body for conditional access policy graph api.
But the body which we are passing is not correct. PFB the code

Is there any way to send PowerShell variables as part of body?

CODE

$body = '{
"displayName": $conditionalAccessPolicy.policyDisplayName,
"state": $conditionalAccessPolicy.state,
"conditions": {
"clientAppTypes": $conditionalAccessPolicy.clientAppTypes
"applications": {
"includeApplications": $conditionalAccessPolicy.includeApplications,
"includeUserActions": $conditionalAccessPolicy.includeUserActions
},
"users": {
"includeUsers": $conditionalAccessPolicy.includeUsers,
"excludeUsers": $conditionalAccessPolicy.excludeUsers
},
"locations": {
"includeLocations": $conditionalAccessPolicy.includeLocations,
"excludeLocations": $conditionalAccessPolicy.excludeLocations
}
},
"grantControls": {
"operator": $conditionalAccessPolicy.grantControlOperator,
"builtInControls": $conditionalAccessPolicy.grantBuiltInControls
},
"sessionControls": {
"signInFrequency": {
"isEnabled": $conditionalAccessPolicy.signInFrequency.isEnabled,
"type": $conditionalAccessPolicy.signInFrequency.type,
"value": $conditionalAccessPolicy.signInFrequency.value
},
"persistentBrowser": {
"mode": $conditionalAccessPolicy.persistentBrowser.mode,
"isEnabled" : $conditionalAccessPolicy.persistentBrowser.isEnabled
}
}
}'

Answer 1

You're declaring the $body variable as a string, use a hash-table instead and then covert to JSON:

$body = @{  
    "displayName" = $conditionalAccessPolicy.policyDisplayName  
    "state" = $conditionalAccessPolicy.state  
    "conditions" = @{  
        "clientAppTypes" = $conditionalAccessPolicy.clientAppTypes  
    }  
} | ConvertTo-Json  

Refer to the cmdlet help for more examples: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/convertto-json?view=powershell-7.2

Answer 2

@K Roja

You can make use of below article with steps mentioned to handle create CA policy using Graph API

https://github.com/Azure-Samples/azure-ad-conditional-access-apis/tree/main/01-configure/graphapi#step-2-create-a-conditional-access-policy

Let me know if you have any further questions

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.