Fix for CA policies with external tenants

DChorn-ANS · Jul 27, 2023 · bbb5134 · bbb5134
1 parent a2d5f5d
commit bbb5134
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/AddCAPolicy/run.ps1 b/AddCAPolicy/run.ps1
@@ -38,7 +38,10 @@ $JSONObj = $request.body.RawJSON | ConvertFrom-Json | Select-Object * -ExcludePr
 Remove-EmptyArrays $JSONObj
 #Remove context as it does not belong in the payload.
 $JsonObj.grantControls.PSObject.Properties.Remove('[email protected]')
-$JsonObj.conditions.users.excludeGuestsOrExternalUsers.externalTenants.PSObject.Properties.Remove('@odata.type')
+if ($JSONObj.conditions.users.excludeGuestsOrExternalUsers.externalTenants.Members) {
+    $JsonObj.conditions.users.excludeGuestsOrExternalUsers.externalTenants.PSObject.Properties.Remove('@odata.context')
+    $JsonObj.conditions.users.excludeGuestsOrExternalUsers.externalTenants.PSObject.Properties.Remove('@odata.type')
+}
 $RawJSON = $JSONObj | ConvertTo-Json -Depth 10
 
 $results = foreach ($Tenant in $tenants) {