Feature Request - Conditional Access - Terms of use

[dotjesper]

Hello!

Your tool is awesome and I really appreciate you putting this together.

Have you considered adding support for managing "Conditional Access - Terms of use" settings. Not the Microsoft Endpoint Manager Tenant admin | Terms and conditions, but the Terms of Use as part of Conditional Access?

Thank you for such an awesome tool!

[Micke-K]

Hello!

I thought about it but never took the time to do it. This request is a great reason to look into it.

Thank for all the great suggestions!

[dotjesper]

Btw: was looking for you on twitter as I wanted to give a big shout-out to my Windows Management Use Group - couldn't find you :(

[Micke-K]

Haha thank you so much!
I am on Twitter but not active. I'm following you now so you should be able to see me, @Micke_K_72
Maybe I should start sending updates for this project on Twitter

[Micke-K]

Hello!

I spent some time on this last night. The portal uses an external API (not Graph) when reading Terms of Use.

MS has implemented this in Graph but I cannot find a way to get the pdf data. The property is always coming back with null value. So I could export the info including file name but it would require "manual" storage of the pdf files.

I'll keep looking and trying to find a way to get the file data.

Calling external API would be another solution but that could require a complete redesign with multiple logins.

[dotjesper]

Hello,

Thank you for your respons.

Storing the pfd's locally would work for me, and would make perfectly sense, as the pdf's most certainly differ from various setups. Whatever a filepicker pr. policy or to ensure the pfd have the correct name according to the json-file, I am nut sure what would work best. I currently have four different Term of Use polices, and a file picker would be ok for that number og pfd's.

Just some random thoughts.

--Jesper

PS: I found you on twitter :)

[Micke-K]

Hello,

I've been super busy this week so I haven't had time to dig deeper into this but I need to understand a little bit more on how you want it to work. Filepicker is possible but hard to implement since it would not support bulk import and automation. The idea I have for importing the json is that the script will look for the pdf file in a specific folder, if found it will import the object with the data from the pdf. The file name is included in the exported json so if the script knows the file associated with the profile. You just need to make sure they have different file names and store them in the folder.

I did spend some more time trying to figure out how to get the file data through APIs but the property always returns null.

I'll keep adding updates here on the progress. I'm sorry that I can't give you an estimated time but I'll spend time on it as soon as I get some spare time.

Cheers!

[Micke-K]

3.2.3 release with support for Terms of Use. The pdf file must be copied to either the exported folder or to the Intune App folder specified in settings. No super happy with this solution but I could not find any way to return fileData with the agreements API.

Note: This is NOT visible by default. You have to enable the Preview option in Settings and then restart the script. This will generate a consent prompt since new permissions is required hence the Preview status. I just want to make sure you are happy with it before everyone else gets the consent prompt.

[dotjesper]

Great to see this option is available. I will dive into this and let you know if I stumble upon any issues.

[Micke-K]

Hello!

Long time! Not sure if you still use the tool but I revisited this by accident today and saw that they added support for downloading of the file. So I added support for this in the tool, during the export of the policy. I exporting a Terms of Use and it now downloads the PDF to the Export folder. I then imported it again and it all worked. No more requirement of having the pdf in the App Settings folder

If you test this, make sure you have the latest version as base and copy the two modules from the zip file.

Cheers!

EndpointManager.zip

[dotjesper]

Hi Micke
I am Indeed using the tool and really impressed with the continuing evolvement. I have tried to add the two files to version 3.7.3, and it seems to work great, really nice. Am I right in this is not part of the 3.7.3 version (yet)?

[Micke-K]

It's included in the 3.7.4 release. That is the master. I just realised I have created the actual release for it yet though. Download the master zip and it will be included...

Cheers!

[dotjesper]

If I could draw up some dancing people, with fireworks, party and sunshine :)

Thanks, I will it test immediately.

[Micke-K]

Hello!

Closing this issue now since it should have full support for this.

Let me know if you have any issues.

Cheers!