IntuneManagement 4.0.0-beta1

2026-09-28 19:05:38 +02:00 · 2026-09-23 19:13:09 +10:00
commit 7869619510
892 changed files with 577109 additions and 0 deletions
@@ -0,0 +1,113 @@
+function Start-GraphBulkDelete {
+    <#
+    .SYNOPSIS
+        Bulk-delete Intune policy objects.
+
+    .DESCRIPTION
+        Public, UI-independent driver for bulk delete. The WPF and Avalonia
+        bulk-delete forms are thin callers of this function (they own the
+        confirmation prompt); the same function can be invoked from a
+        scheduled task or pipeline.
+
+        DESTRUCTIVE: every object of the selected groups (matching the
+        optional name filter) is deleted from the signed-in tenant. There is
+        no confirmation in this driver - callers confirm before invoking.
+
+        Groups are processed in DESCENDING ImportOrder so dependents are
+        deleted before their dependencies.
+
+    .PARAMETER Filter
+        Name filter (literal substring, case-insensitive). Empty = delete
+        every object of the selected groups.
+
+    .PARAMETER PolicyGroup
+        Restrict the delete to these PolicyGroup IDs. Mandatory - bulk
+        deleting every group implicitly is too dangerous for a default.
+
+    .PARAMETER TokenId
+        Authentication token id. Defaults to the current default token.
+
+    .EXAMPLE
+        Start-GraphBulkDelete -PolicyGroup DeviceConfiguration -Filter "[Test]"
+
+    .OUTPUTS
+        PSCustomObject with summary statistics (Groups, Deleted, Duration).
+    #>
+    [CmdletBinding()]
+    param(
+        [string]
+        $Filter,
+
+        [Parameter(Mandatory = $true)]
+        [string[]]
+        $PolicyGroup,
+
+        [Int]
+        $TokenId = (Get-DefaultTokenId)
+    )
+
+    $stopwatch = [System.Diagnostics.Stopwatch]::StartNew()
+
+    $selection = Resolve-IntuneTargetSelectors -PolicyGroup $PolicyGroup -Caller 'Start-GraphBulkDelete'
+    $unknownSelectors = $selection.Unknown   # ids from -PolicyGroup that matched nothing
+    $targetGroups = [System.Collections.Generic.List[object]]::new()
+    $targetGroups.AddRange([object[]]$selection.Groups)
+    if ($targetGroups.Count -eq 0) {
+        Write-Log "Bulk delete: no policy groups selected" 2
+        return [PSCustomObject]@{ Groups = 0; Deleted = 0; UnknownSelectors = $unknownSelectors; Duration = $stopwatch.Elapsed }
+    }
+
+    Write-Log "****************************************************************"
+    Write-Log "Start bulk delete"
+    Write-Log "****************************************************************"
+
+    $totalDeleted = 0
+    # Reverse import-order so dependents are deleted before their dependencies.
+    $orderedGroups = @($targetGroups | Sort-Object { ($_.PolicyTypes | Measure-Object ImportOrder -Minimum).Minimum } -Descending)
+    $groupTotal    = $orderedGroups.Count
+    $groupIndex    = 0
+
+    foreach ($grp in $orderedGroups) {
+        $groupIndex++
+        Write-Log "----------------------------------------------------------------"
+        Write-Log "Delete $($grp.Title) objects"
+        Write-Log "----------------------------------------------------------------"
+
+        try {
+            Write-Status `
+                -Text   ("Bulk delete - {0} ({1} of {2})" -f $grp.Title, $groupIndex, $groupTotal) `
+                -Detail "Listing policies" `
+                -Force
+            $policies = @(Get-GraphPolicies -PolicyGroup $grp.ID -TokenId $TokenId)
+
+            if ($Filter) {
+                $policies = @($policies | Where-Object { $_.Name -match [RegEx]::Escape($Filter) })
+            }
+
+            if ($policies.Count -eq 0) {
+                Write-Log "No $($grp.Title) objects found"
+                continue
+            }
+
+            Write-Log "Deleting $($policies.Count) $($grp.Title) object(s)"
+            Write-Status -Detail ("Deleting {0} object(s)" -f $policies.Count) -SkipLog -Force
+            $policies | Remove-GraphPolicy -Confirm:$false | Out-Null
+            $totalDeleted += $policies.Count
+        }
+        catch {
+            Write-LogError "Failed when deleting $($grp.Title) objects" $_.Exception
+        }
+    }
+
+    Write-Status $null
+    Write-Log "****************************************************************"
+    Write-Log "Bulk delete finished"
+    Write-Log "****************************************************************"
+
+    return [PSCustomObject]@{
+        Groups           = $orderedGroups.Count
+        Deleted          = $totalDeleted
+        UnknownSelectors = $unknownSelectors
+        Duration         = $stopwatch.Elapsed
+    }
+}