kelvintegelaar / cipp Goto Github PK
View Code? Open in Web Editor NEWCIPP is a M365 multitenant management solution
Home Page: https://cyberdrain.com / https://cipp.app
License: GNU Affero General Public License v3.0
CIPP is a M365 multitenant management solution
Home Page: https://cyberdrain.com / https://cipp.app
License: GNU Affero General Public License v3.0
One element of system administration that always made my life easier was AD user templates. Having pre-defined permissions, group memberships, ADSI customizations, profile settings all pre-populated was awesome.
M365 user templates suck and are all but pointless. They don't do anything except save a few clicks (they save no brainpower).
With CIPP I can foresee an alternative to AD user templates with something like 'copy user settings from other user' dropdown box.
Get-AzureADUserMembership -ObjectId {source user object id}|foreach { Add-AzureADGroupMember -ObjectId $_.ObjectId -RefObjectId {new user object id} }
Describe the bug
First off, amazing solution - thank you!
I have a tenant with around 2,200 users, for this tenant only, the user list never loads the actual list of users.
It is working for my other tenants with much less users. The app permissions test is coming back ok.
I've tried leaving it for a while and have tried different browsers - chrome, firefox, edge
The groups seem to load ok and there's 1,350 of those.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
The list of users will appear.
Desktop (please complete the following information):
It would by very helpful to report the current status of each item that is settable via the Standards. This would allow a central place to determine if setting to standard would change the tenant's current configuration.
Ideally a single page with a matrix of the tenants and their related settings in regards to the items available to be set to a standard.
A button to refresh on demand would be great.
Add ability to view restricted users for a tenant and remove block
Get-BlockedSenderAddress
Remove-BlockedSenderAddress -SenderAddress
It would be nice to have a Refresh / Reload tenants button to grab the latest results from the partner portal.
Don't know if there is a default interval at the moment.
Is your feature request related to a problem? Please describe.
The logging engine currently works by adding entries to a text file, using a mutex to prevent parallel write issues. This works OKish but could use some improvements.
I'd also like to have logs be in a better format. We currently use
DATE, USER, MESSAGE, SEVERITY
I am proposing changing this to:
DATE, USER, TENANT, MESSAGE, SEVERITY
Each API should post to the log without exception. Severity levels should be:
DEBUG
INFO
WARN
ERROR
CRITICAL
By default, the log should only return the INFO/WARN/ERROR levels, and have a selection option for the full log.
Describe the bug
MFA Report does not load
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Expect to see a list of users and their MFA Status
Desktop (please complete the following information):
Describe the bug
When searching in certain conditions the tenant selector returns two of the same tenant
To Reproduce
Steps to reproduce the behavior:
Expected behavior
One search result presented when selecting a tenant
Desktop (please complete the following information):
Describe the bug
Link to documentation is 404
To Reproduce
Steps to reproduce the behavior:
Enable SMTP Auth would be nice.
We now do this with Powershell
Command used:
Check: Get-TransportConfig | Format-List SmtpClientAuthenticationDisabled
Enable SMTP: Set-TransportConfig -SmtpClientAuthenticationDisabled $false
Is your feature request related to a problem? Please describe.
A useful standard we already keep for our tenants is disabling of shared mailboxes. I'm unsure why Microsoft doesn't do this already, but my understanding is that shared mailboxes can be logged into. So it is best practice to ensure they are disabled.
Describe the solution you'd like
Create a standard to make sure all shared mailboxes have sign-in disabled.
When you create a new user show username on confirmation box and format correctly so its easy to copy username/password
Might look like
Success User has been created.
USER: [email protected]
PASSWORD: 1234567
When adding a new user, make the tenant selector field mandatory before you can fill in the details below.
Is your feature request related to a problem? Please describe.
User List butons
Describe the solution you'd like
Make spacing on buttons wider
Add confimation before running command
Describe the solution you'd like
I'd like to be able to have engineers run a Wizard to offboard a user, with checkboxes to convert a user to a shared mailbox, remove the licenses, block sign-in, and set an OoO.
Describe alternatives you've considered
manually doing it, blergh
Is your feature request related to a problem? Please describe.
The critical alerts currently only show up in the logbook. It would be nice to have them on the homepage so it's possible to react based on it.
Describe the solution you'd like
A new API at /api/GenerateAlert that will be called each time a critical alert is generated.
Describe alternatives you've considered
E-mail notifications and Webhooks, these are on their way in a future release.
Additional context
Under /?page=Addstandard .. Have the ability to set a 'standard' for max email attachment size for the tenant.
Get-MailboxPlan | Set-MailboxPlan -MaxSendSize 150MB -MaxReceiveSize 150MB
Describe the bug
To Reproduce
Steps to reproduce the behavior:
Is your feature request related to a problem? Please describe.
I'd like the first settings page to contain a check for which permissions are active, and give a red X when a permission is not yet present. This should help in troubleshooting scenarios, as the Secure App Model can behave iffy sometimes.
Describe the solution you'd like
Go to settings
First page will run a compare of permissions vs active key permissions. If no key is found or logon is impossible, it will also note why.
Describe alternatives you've considered
None
Additional context
Add any other context or screenshots about the feature request here.
Is your feature request related to a problem? Please describe.
Add mobile device information per mailbox
Describe the solution you'd like
Add mobile device information per mailbox
Describe alternatives you've considered
Using the 365 portal.
Describe the bug
Back to Users Button, takes you back to user list but removes current tenant detials
To Reproduce
Steps to reproduce the behavior:
Expected behavior
keep current tenant active
Desktop (please complete the following information):
Describe the bug
Form can be submitted with no data being filled in.
To Reproduce
click add new user to open the form
click add user button at the bottom of the page
Expected behavior
Required fields/check before the form is submitted.
Desktop (please complete the following information):
When adding a new group, make the tenant selector field mandatory before you can fill in the details below.
Describe the bug
When adding a tenant to the Excluded Tenants list, the website doesn't automatically refresh, making it impossible to add another tenant.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
After clicking Close after adding the tenant, the page should auto-reload to reflect the change and allow you to add a new tenant to the list.
Describe the bug
Duplicate word on page
To Reproduce
Steps to reproduce the behavior:
Screenshots
Desktop (please complete the following information):
Describe the bug
sync ajax calls can cause little hangs in the app, that are quite annoying. I think setting async to true everywhere should resolve, but needs to be tested first.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
no hang events.
Desktop (please complete the following information):
When adding a "user" allow system wide default setting for "Usage location"
Is your feature request related to a problem? Please describe.
When clicking password reset at the moment it generates a password and forces change at next login.
Add additional box to ask for "create password automatically" "require password change at next login" like the new user form
Describe the bug
When changing the pages via a <SpecialNavLink>
the active marker of the page does not change.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Menu item must change
Additional context
This is a known issue, will be worked on.
Originally posted by DarrenChap October 17, 2021
Hi Kelvin et al,
Originally put this in the intro section. Doh! GitHub Gumby here....
Just wondering if displaying the users sync status with AD in the user lists and/or the Tenant selection would be handy for those of us not yet able to break away completely from on prem AD?
Is your feature request related to a problem? Please describe.
When Microsoft imports a new tenant contract it only updates that information a single time; at creation. This means if the tenant had the wrong name, or changed names/domains they will forever be listed like that in your contracts list.
We can use the following to edit tenants:
• Log into Azure Graph API through the URL https://graphexplorer.azurewebsites.net using your Global Admin & Admin agent credentials.
• Then execute the GET call to get the list of the Partner Contacts using the following REST Call
o GET https://graph.windows.net/myorganization/contracts? [api-version=1.6]
• From here copy the Object ID of the customer.
• With the help of following PATCH call, please update the display domain of the Customer:
o PATCH https://graph.windows.net/myorganization/contracts/<object-id-of-contract>? [api-version=1.6]
{"defaultDomainName":"NEWDEFAULTDOMAINNAME"}
Maybe we can include a edit button on the tenants list, to allow change of the returned properties:
"contractType": "3",
"customerContextId": "8dde2954-2562-48c7-a555-cccc",
"defaultDomainName": "cccc.onmicrosoft.com",
"displayName": "xxxx BV"
We could also add the delete button, but this is quite destructive and I'm not 100% confident it's needed.
Ability to run a message trace. "summary report" with an option of getting more details
Input
Output
Get-MessageTrace
Get-MessageTraceDetail
Describe the bug
On the Tenant Dashboard URLs to the portal load inside the same window as the Dashboard
To Reproduce
Steps to reproduce the behavior:
Expected behavior
It should open in a new tab
Describe the bug
When a page with a data table is loaded, before a tenant is selected, the page calls the Azure Function unnecessarily. This slows down the load of the page and can cause a temporary micro hang, triggers the functions with error output and causes unnecessary usage of resource (potentially increasing cost unnecessarily in a consumption plan)
To Reproduce
Steps to reproduce the behavior:
Expected behavior
No call to the function should be made until a tenant is selected
Desktop (please complete the following information):
Describe the bug
Tenants added to the "Excluded Tenants" list are not excluded from the tenants listed even after clearing the Tenant Cache
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Tenants added to the "Excluded Tenants" list should not appear in and tenant select drop downs or searches
Desktop (please complete the following information):
Additional context
Latest version from GitHub, fetched and merged 5 minutes before test.
Describe the bug
Report\Mailbox List does not display correctly missing items on right. if you zoom the page to 80% it shows
To Reproduce
Steps to reproduce the behavior:
Desktop (please complete the following information):
Describe the bug
The $.datatable call doesn't have a way of handling errors.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Notify the user that an error has occurred from the API.
Desktop (please complete the following information):
This can be handled a number of ways. I personally like using Toastr for something like this.
Describe the solution you'd like
Under the add standards section, I'd like a standard option for removing anonymous sharing from OneDrive and SharePoint.
This is a common element I do manually for all new tenants.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.