Qeedji 1.11.11 002A, Руководство пользователя, Страница: 44 / 58

44
6.5 Appendix: AZURE AD Application Powershell module
Download the
Powershell_Innes_AAD-1.10.13.zip
from the Innes Site Web then follow the instructions below.
Introduction
This set of Powershell functions allows to:
create an Azure Active Directory application, with the
New-AADApplication
function,
remove an Azure Active Directory application, with the
Remove-AADApplication
function.
These functions are defined in the
PSAAD
PowerShell module stored in the
Modules\PSAAD\
directory.
The result of the Powershell functions is also stored in a JSON file.
Edit the file and store preciously the values which could be required for your application:
the
clientId
value,
the
tenantId
value,
the
clientSecret
value.
Security
By default, the execution of local Powershell scripts are not allowed. You can change their execution rights by changing the PowerShell security policy.
This modification has to be done once with the
Set-ExecutionPolicy
Powershell function. Your organization may have to change it according to your
security rules.
For example, to authorize the execution of all scripts, launch a
Powershell console with administrator rights, and type:
PS > Set-ExecutionPolicy -ExecutionPolicy Unrestricted -scope CurrentUser
For further information, look at the cmdlet
Set-ExecutionPolicy
help page.
If you cannot allow the execution of unsigned local scripts, you can install the provided certificate in the list of authorized root certificates with the
command:
PS > cd <your_path_to_the_scripts>\Powershell_Innes_AAD\Certificate\
PS > Import-PfxCertificate -FilePath InnesCodeSigningRootCA_1.pfx -CertStoreLocation ../..
cert:\CurrentUser\Root -Password $(ConvertTo-SecureString "1234" -AsPlainText -Force)
To import the .pfx certificate, you can also use the MS-Windows application
certmgr.msc
, select the
Trusted Root Certification Authorities
, right clic
on
All Tasks
, select the
Import
item, select the file and enter the password
1234
. When ended, close the current Powershell console.
Prerequisite
Install the Azure AD module
Install the AzureAD module with the command below:
PS > Install-Module -name AzureAD -scope CurrentUser
Dependency
If this message is prompted, enter
Y
.
The NuGet supplier is required to continue
PowerShellGet requires the NuGet vendor, version 2.8.5.201 or later, to interact with the repositories.
The NuGet provider must be available in "C:\Program Files\PackageManagement\ProviderAssemblies" or ../..
"C:\Users\<username>\AppData\Local\PackageManagement\ProviderAssemblies".
You can also install the provider NuGet by executing the command "Install-PackageProvider -Name NuGet ../..
-MinimumVersion 2.8.5.201 -Force". Do you want that PowerShellGet installs and imports the NuGet provider now?
[Y] Yes [N] No [S] Suspend [?] Help (default is "Y"):
If this message is prompted, enter
Y
.
Unapproved repository
You install the modules from an unapproved repository. If you approve this repository, change its ../..
InstallationPolicy value by running the Set-PSRepository command applet. Do you really want to install From PSGallery ?
[Y] Yes [T] Yes for all [N] No [U] No for all [S] Suspend [?] Help (default is "N"):
Usage
To use one of the Powershell modules, you have to define the environment variable for PSAAD. You have 3 possibilities: