Skip to content

BREAKING CHANGE: Remove read-only SupportsScopeTags property from all resources #6180

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Sep 23, 2025
Merged

BREAKING CHANGE: Remove read-only SupportsScopeTags property from all resources #6180

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
4d25e5b
Remove read-only `SupportsScopeTags` property from all resources
FabienTschanz Jun 15, 2025
568f997
Move and combine test mocks in startup of test
FabienTschanz Jun 15, 2025
d9ae5f7
Fix unit tests
FabienTschanz Jun 16, 2025
5977e7f
Merge branch 'Dev' into feat/remove-scopetags-property
FabienTschanz Jun 26, 2025
950abc0
Merge branch 'Dev' into feat/remove-scopetags-property
FabienTschanz Sep 17, 2025
cee01bd
Merge remote-tracking branch 'origin/Dev' into feat/remove-scopetags-…
FabienTschanz Sep 23, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,7 @@
* Fixed typo in `ManagedIdentity` property across all resources.
* Reduced repeated logins during export of SPO and Teams resources.
* Removed unnecessary type casting across all resources.
* [BREAKING CHANGE] Removed `SupportsScopeTags` property from all resources because it's read-only.
* M365DSCDRGUtil
* Fixed an issue where a null drift would throw an exception.
* Fixed an issue where group filtering would not find the specified groups.
Expand Down
13 changes: 0 additions & 13 deletions ...nfigurationCustomPolicyWindows10/MSFT_IntuneDeviceConfigurationCustomPolicyWindows10.psm1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,10 +23,6 @@ function Get-TargetResource
[System.String[]]
$RoleScopeTagIds,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -184,7 +180,6 @@ function Get-TargetResource
Description = $getValue.Description
DisplayName = $getValue.DisplayName
RoleScopeTagIds = $getValue.RoleScopeTagIds
SupportsScopeTags = $getValue.SupportsScopeTags
Id = $getValue.Id
Ensure = 'Present'
Credential = $Credential
Expand Down Expand Up @@ -243,10 +238,6 @@ function Set-TargetResource
[System.String[]]
$RoleScopeTagIds,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -421,10 +412,6 @@ function Test-TargetResource
[System.String[]]
$RoleScopeTagIds,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down
1 change: 0 additions & 1 deletion ...ationCustomPolicyWindows10/MSFT_IntuneDeviceConfigurationCustomPolicyWindows10.schema.mof
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,6 @@ class MSFT_IntuneDeviceConfigurationCustomPolicyWindows10 : OMI_BaseResource
[Write, Description("OMA settings. This collection can contain a maximum of 1000 elements."), EmbeddedInstance("MSFT_MicrosoftGraphomaSetting")] String OmaSettings[];
[Write, Description("Admin provided description of the Device Configuration.")] String Description;
[Write, Description("List of Scope Tags for this Entity instance.")] String RoleScopeTagIds[];
[Write, Description("Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.")] Boolean SupportsScopeTags;
[Write, Description("The unique identifier for an entity. Read-only.")] String Id;
[Write, Description("Represents the assignment to the Intune policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[];
[Write, Description("Present ensures the policy exists, absent ensures it is removed."), ValueMap{"Present","Absent"}, Values{"Present","Absent"}] string Ensure;
Expand Down
13 changes: 0 additions & 13 deletions ...ionPolicyWindows10/MSFT_IntuneDeviceConfigurationDeliveryOptimizationPolicyWindows10.psm1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,10 +86,6 @@ function Get-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -308,7 +304,6 @@ function Get-TargetResource
VpnPeerCaching = $enumVpnPeerCaching
Description = $getValue.Description
DisplayName = $getValue.DisplayName
SupportsScopeTags = $getValue.SupportsScopeTags
Id = $getValue.Id
RoleScopeTagIds = $getValue.RoleScopeTagIds
Ensure = 'Present'
Expand Down Expand Up @@ -429,10 +424,6 @@ function Set-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -650,10 +641,6 @@ function Test-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down
1 change: 0 additions & 1 deletion ...icyWindows10/MSFT_IntuneDeviceConfigurationDeliveryOptimizationPolicyWindows10.schema.mof
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,6 @@ class MSFT_IntuneDeviceConfigurationDeliveryOptimizationPolicyWindows10 : OMI_Ba
[Write, Description("Specifies whether the device is allowed to participate in Peer Caching while connected via VPN to the domain network."), ValueMap{"notConfigured","enabled","disabled"}, Values{"notConfigured","enabled","disabled"}] String VpnPeerCaching;
[Write, Description("Admin provided description of the Device Configuration.")] String Description;
[Key, Description("Admin provided name of the device configuration.")] String DisplayName;
[Write, Description("Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.")] Boolean SupportsScopeTags;
[Write, Description("The unique identifier for an entity. Read-only.")] String Id;
[Write, Description("List of Scope Tags for this Entity instance.")] String RoleScopeTagIds[];
[Write, Description("Represents the assignment to the Intune policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[];
Expand Down
13 changes: 0 additions & 13 deletions ...ionDomainJoinPolicyWindows10/MSFT_IntuneDeviceConfigurationDomainJoinPolicyWindows10.psm1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,10 +31,6 @@ function Get-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -155,7 +151,6 @@ function Get-TargetResource
OrganizationalUnit = $getValue.AdditionalProperties.organizationalUnit
Description = $getValue.Description
DisplayName = $getValue.DisplayName
SupportsScopeTags = $getValue.SupportsScopeTags
Id = $getValue.Id
RoleScopeTagIds = $getValue.RoleScopeTagIds
Ensure = 'Present'
Expand Down Expand Up @@ -222,10 +217,6 @@ function Set-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -388,10 +379,6 @@ function Test-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down
1 change: 0 additions & 1 deletion ...ainJoinPolicyWindows10/MSFT_IntuneDeviceConfigurationDomainJoinPolicyWindows10.schema.mof
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,6 @@ class MSFT_IntuneDeviceConfigurationDomainJoinPolicyWindows10 : OMI_BaseResource
[Write, Description("Organizational unit (OU) where the computer account will be created. If this parameter is NULL, the well known computer object container will be used as published in the domain.")] String OrganizationalUnit;
[Write, Description("Admin provided description of the Device Configuration.")] String Description;
[Key, Description("Admin provided name of the device configuration.")] String DisplayName;
[Write, Description("Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.")] Boolean SupportsScopeTags;
[Write, Description("The unique identifier for an entity. Read-only.")] String Id;
[Write, Description("List of Scope Tags for this Entity instance.")] String RoleScopeTagIds[];
[Write, Description("Represents the assignment to the Intune policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[];
Expand Down
13 changes: 0 additions & 13 deletions ...ctionPolicyWindows10/MSFT_IntuneDeviceConfigurationEndpointProtectionPolicyWindows10.psm1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -980,10 +980,6 @@ function Get-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -2639,7 +2635,6 @@ function Get-TargetResource
XboxServicesLiveNetworkingServiceStartupMode = $enumXboxServicesLiveNetworkingServiceStartupMode
Description = $getValue.Description
DisplayName = $getValue.DisplayName
SupportsScopeTags = $getValue.SupportsScopeTags
Id = $getValue.Id
RoleScopeTagIds = $getValue.RoleScopeTagIds
Ensure = 'Present'
Expand Down Expand Up @@ -3656,10 +3651,6 @@ function Set-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -4796,10 +4787,6 @@ function Test-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down
1 change: 0 additions & 1 deletion ...olicyWindows10/MSFT_IntuneDeviceConfigurationEndpointProtectionPolicyWindows10.schema.mof
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -350,7 +350,6 @@ class MSFT_IntuneDeviceConfigurationEndpointProtectionPolicyWindows10 : OMI_Base
[Write, Description("This setting determines whether Networking service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled."), ValueMap{"manual","automatic","disabled"}, Values{"manual","automatic","disabled"}] String XboxServicesLiveNetworkingServiceStartupMode;
[Write, Description("Admin provided description of the Device Configuration.")] String Description;
[Key, Description("Admin provided name of the device configuration.")] String DisplayName;
[Write, Description("Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.")] Boolean SupportsScopeTags;
[Write, Description("The unique identifier for an entity. Read-only.")] String Id;
[Write, Description("List of Scope Tags for this Entity instance.")] String RoleScopeTagIds[];
[Write, Description("Represents the assignment to the Intune policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[];
Expand Down
13 changes: 0 additions & 13 deletions ...erfacePolicyWindows10/MSFT_IntuneDeviceConfigurationFirmwareInterfacePolicyWindows10.psm1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,10 +120,6 @@ function Get-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -384,7 +380,6 @@ function Get-TargetResource
WirelessWideAreaNetwork = $enumWirelessWideAreaNetwork
Description = $getValue.Description
DisplayName = $getValue.DisplayName
SupportsScopeTags = $getValue.SupportsScopeTags
RoleScopeTagIds = $getValue.RoleScopeTagIds
Id = $getValue.Id
Ensure = 'Present'
Expand Down Expand Up @@ -541,10 +536,6 @@ function Set-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -796,10 +787,6 @@ function Test-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down
1 change: 0 additions & 1 deletion ...PolicyWindows10/MSFT_IntuneDeviceConfigurationFirmwareInterfacePolicyWindows10.schema.mof
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,6 @@ class MSFT_IntuneDeviceConfigurationFirmwareInterfacePolicyWindows10 : OMI_BaseR
[Write, Description("Defines whether a user is allowed to enable Wireless Wide Area Network. Possible values are: notConfigured, enabled, disabled."), ValueMap{"notConfigured","enabled","disabled"}, Values{"notConfigured","enabled","disabled"}] String WirelessWideAreaNetwork;
[Write, Description("Admin provided description of the Device Configuration.")] String Description;
[Key, Description("Admin provided name of the device configuration.")] String DisplayName;
[Write, Description("Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.")] Boolean SupportsScopeTags;
[Write, Description("The unique identifier for an entity. Read-only.")] String Id;
[Write, Description("List of Scope Tags for this Entity instance.")] String RoleScopeTagIds[];
[Write, Description("Represents the assignment to the Intune policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[];
Expand Down
13 changes: 0 additions & 13 deletions ...Windows10/MSFT_IntuneDeviceConfigurationHealthMonitoringConfigurationPolicyWindows10.psm1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,10 +29,6 @@ function Get-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -159,7 +155,6 @@ function Get-TargetResource
ConfigDeviceHealthMonitoringScope = $enumConfigDeviceHealthMonitoringScope
Description = $getValue.Description
DisplayName = $getValue.DisplayName
SupportsScopeTags = $getValue.SupportsScopeTags
Id = $getValue.Id
RoleScopeTagIds = $getValue.RoleScopeTagIds
Ensure = 'Present'
Expand Down Expand Up @@ -225,10 +220,6 @@ function Set-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -391,10 +382,6 @@ function Test-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down
1 change: 0 additions & 1 deletion ...s10/MSFT_IntuneDeviceConfigurationHealthMonitoringConfigurationPolicyWindows10.schema.mof
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,6 @@ class MSFT_IntuneDeviceConfigurationHealthMonitoringConfigurationPolicyWindows10
[Write, Description("Specifies set of events collected from the device where health monitoring is enabled. Possible values are: undefined, healthMonitoring, bootPerformance, windowsUpdates, privilegeManagement."), ValueMap{"undefined","healthMonitoring","bootPerformance","windowsUpdates","privilegeManagement"}, Values{"undefined","healthMonitoring","bootPerformance","windowsUpdates","privilegeManagement"}] String ConfigDeviceHealthMonitoringScope[];
[Write, Description("Admin provided description of the Device Configuration.")] String Description;
[Key, Description("Admin provided name of the device configuration.")] String DisplayName;
[Write, Description("Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.")] Boolean SupportsScopeTags;
[Write, Description("The unique identifier for an entity. Read-only.")] String Id;
[Write, Description("List of Scope Tags for this Entity instance.")] String RoleScopeTagIds[];
[Write, Description("Represents the assignment to the Intune policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[];
Expand Down
13 changes: 0 additions & 13 deletions ...ctionPolicyWindows10/MSFT_IntuneDeviceConfigurationIdentityProtectionPolicyWindows10.psm1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,10 +74,6 @@ function Get-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -221,7 +217,6 @@ function Get-TargetResource
WindowsHelloForBusinessBlocked = $getValue.AdditionalProperties.windowsHelloForBusinessBlocked
Description = $getValue.Description
DisplayName = $getValue.DisplayName
SupportsScopeTags = $getValue.SupportsScopeTags
Id = $getValue.Id
RoleScopeTagIds = $getValue.RoleScopeTagIds
Ensure = 'Present'
Expand Down Expand Up @@ -332,10 +327,6 @@ function Set-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down Expand Up @@ -543,10 +534,6 @@ function Test-TargetResource
[System.String]
$DisplayName,

[Parameter()]
[System.Boolean]
$SupportsScopeTags,

[Parameter()]
[System.String]
$Id,
Expand Down
1 change: 0 additions & 1 deletion ...olicyWindows10/MSFT_IntuneDeviceConfigurationIdentityProtectionPolicyWindows10.schema.mof
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,6 @@ class MSFT_IntuneDeviceConfigurationIdentityProtectionPolicyWindows10 : OMI_Base
[Write, Description("Boolean value that blocks Windows Hello for Business as a method for signing into Windows.")] Boolean WindowsHelloForBusinessBlocked;
[Write, Description("Admin provided description of the Device Configuration.")] String Description;
[Key, Description("Admin provided name of the device configuration.")] String DisplayName;
[Write, Description("Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.")] Boolean SupportsScopeTags;
[Write, Description("The unique identifier for an entity. Read-only.")] String Id;
[Write, Description("List of Scope Tags for this Entity instance.")] String RoleScopeTagIds[];
[Write, Description("Represents the assignment to the Intune policy."), EmbeddedInstance("MSFT_DeviceManagementConfigurationPolicyAssignments")] String Assignments[];
Expand Down
Loading
Loading