How to add a license to an user on AZ Powershell? - azure-active-directory

I am using Azure Powershell (AZ powershell module) on a docker container. I successfully created a new user using New-AzADUser. But don't know how to add licenses to the user using AZ cmdlet?
I can't use Set-AzureADUserLicense/Set-MsolUserLicense since it is based on AzureAD/MSOnline modules and these works only on Windows.
I am trying to find equivalent command in AZ Powershell that is compatible with docker/linux.

As I know, there is no equivalent command in Az, Az was migrated from AzureRM module, they are for basically for ARM and different from AzureAD and MSOnline modules.
If you want the AzureAD module to be cross-platform, maybe you could post your idea here.

Related

How can We download files(apiDefinition.swagger.json,apiProperties.json,settings.json) from Logic Apps Custom Connector using CLI tool?

I go through the below MSDN link to certify custom connector, In that link in the "Step 4: Prepare the connector artifacts" it is given to download files from connector for Power Platform.
As we created Logic Apps Custom Connectors, there is no way mentioned to download files from it.
Link : https://learn.microsoft.com/en-us/connectors/custom-connectors/certification-submission#step-4-prepare-the-connector-artifacts
So does anyone help me out how to download files from Logic Apps Custom connector instead of Power Platform?
You can use Azure CLI instead and follow the same process.
Before running paconn login try installing paconn pip install paconn and then you 'll be directed to sign in using Microsoft's Device Code process.
Then download your custom connector files using paconn download whenafter you've been authenticated.

ask deploy hangs while deploying to lambda

I have manually deployed a number of Alexa skills using a lambda backend and understand the manual process, however I am new to using the ask cli v2.
I believe I have all of the steps in the guide as far as having both ask and aws cli set. I have set my roles in AWS.
I am currently just trying to get used to the process and running
ask new
changing the invocation and then running
ask deploy
Everything runs seemingly correct until
Skill code built successfully.
Code for region default built to C:\location\projectName.ask\lambda\build.zip successfully with build flow nodejs-npm.
==================== Deploy Skill Infrastructure ====================
/ Deploy Alexa skill infrastructure for region "default"
→ No IAM role exists. Creating an IAM role...
And then we just wait... forever.
The AWS CLI profile has IAMFullAccess to create roles as needed.
What am I missing?
So It ended up being an issue somewhere between permissions on my aws role and the configuration. I changed which role I was using and re-configured ask and aws.
I am not exactly sure where things were fixed because I immediately ran into another error that ended up being a bit of a rabbit hole. That I will describe here because it is common enough and could be seen while trouble shooting my original issue.
The issue I ran into is was when the deploy would happen successfully I could not test with the code that made it to my lambda. In cloud watch it presented as
"Runtime.ImportModuleError: Error: Cannot find module './dispatcher/error/mapper/GenericErrorMapper'"
This ended up being a bug within powershell and compressing to .zip on windows and being unpacked on linux.
I had to run
Install-Module Microsoft.PowerShell.Archive -MinimumVersion 1.2.3.0 -Repository PSGallery -Force
https://github.com/PowerShell/PowerShell/issues/2140
This fixed my final issue.

Exposing resetting active directory password function to third party application

I currently have a Windows server in which I uses Active Directory to manage my user's account. I want to expose my password reset script functionality to a third party application. How can I achieve this with most optimal security?
Currently, I have written a PowerShell script to automate the password reset. I planned to allow PowerShell remote to allow the third party application to execute my script. But I am not sure how to constrain the third party to only be able to execute the script via the script and if this is the optimal solution.
You can take a look at constrained PowerShell endpoints. You can create a "session configuration" that will restrict what can be done, then also restrict who can connect using that configuration.
I can't walk you through how to do it because I've never done it, but there is a whole series of articles on it here: https://devblogs.microsoft.com/scripting/introduction-to-powershell-endpoints/

How to create a react app without admin credentials in Windows?

I am a newbie to React and I work on in a corporation where they do not give you admin credentials to your working PC but you can call IT-support and get them to type a few commands in command terminal and install the software.
So they have installed node.js and run a simple npm i -g create-react-app under administrator privileges.
But when I run npx create-react-app my_app without admin credentials, I fail after a long installation.
So is there anyway to download the basic react app to get started, or make IT-support write a few command lines or is it impossible to develop React without admin credentials?
One option is to use a Linux VM (Virtual Machine). Oracle's VirtualBox is free. Your company may already allow you to load it from some central software repository. This allows you to go ahead and develop in a Sandbox that won't disrupt your company's main network. Ask your IT or Security Dept before installing and using.
First of all removing the -g and installing with the local user helped. But we countinued to face challenges with all sort of corporate IT security blockades. At the end we ended up provisioning our own EC2 machine on amazon and where developing using VScode's remote SSH and we have not looked back since. So please consider this if you are on a restricted corperate PC.

Delete directory / App registrations Delete all App registrations No results

I have an error when trying to delete an ADD B2C. I do not have any application and it indicates to me at the moment of deleting that there one.
I already followed the following links:
blogs.msdn.microsoft.com/azureadb2c/2017/06/23/delete-b2c-tenant/
blogs.technet.microsoft.com/jeffgilb/2017/03/09/deleting-azure-active-directory/
stackoverflow.com/questions/43766171/cannot-delete-corrupted-b2c-application-and-tenant
Screenshots
Image Portal Azure
Image PowerShell
I hope you can help me out.
Thanks, regards.
In your Azure Portal screenshot, there is a link which says:
To view and manage your registrations for converged applications, please visit the Microsoft Application Console.
Try going there to see if there are any converged applications registered in your tenant.
Additionally, you should try running the modern AAD PowerShell rather than the MSOL PowerShell. The modern AAD PowerShell allows you to query for Application Objects like so:
Get-AzureADApplication -All $true
Note that Applications Objects are different than Service Principals, and it appears that both kinds of objects must be removed before you can delete your tenant.

Resources