Hello,

Question: Have you ever had to perform a task for multiple users like granting a permission, policy or something else? and did you do it manually?

I can honestly say I have and it was so time consuming, especially when we have free tools available to use to perform theses actions within seconds/minutes instead of hours/days.

I have generated a script below which I have created to grant a Skype for Business Online policy to a number of users based on their Group Membership. Before you run this script the following assumputions will be made.

• You have a basic understanding of PowerShell Scripting
• You have modified all locations shown with ‘#########’ to your requirements

For the below script I have left in ‘IMOnly’ to show exactly what this script is designed to achieve. If a User doesnt have the IMOnly policy they will be granted the policy but if a User already has IMOnly granted. The script will skip the user and generate an output on screen plus to a definited .txt file before moving onto the next user.

clear-host

# Define Service Account

$username = '#########'

$password = '#########'

$pass = Convertto-Securestring -String $password -asPlaintext -Force

$credential = New-Object -TypeName System.Management.Automation.PScredential -ArgumentList ($username, $pass)



# Connect to Office 365

Import-Module MSOnline

Connect-MsolService -Credential $credential



# Connect to Skype for Business Online

Import-Module -Name SkypeOnlineConnector

$sfboSession = New-CsOnlineSession -Credential $credential

Import-PSSession -Session $sfboSession -AllowClobber



# Get Group Members

Get-MsolGroupMember -GroupObjectId '#########' | export-csv -Path $env:HOMEDRIVE\INSTALL\#########.csv



# Import Users

$csv = Import-Csv -Path $env:HOMEDRIVE\#########\#########.csv



# Assign CsClientPolicy

Foreach ($row in $csv) {

If(Get-CsOnlineUser -Identity $row.EmailAddress | Where-object {$_.ClientPolicy -notcontains 'IMOnly'})

{

Grant-CsClientPolicy -Identity $row.EmailAddress -PolicyName 'IMOnly'

}

else

{

Write-Host -ForegroundColor Yellow $row.EmailAddress "Skipped User"

get-csonlineuser -id $row.EmailAddress | Where-object {$_.ClientPolicy -contains 'IMOnly'} | select-object DisplayName,ClientPolicy | out-file -FilePath $env:HOMEDRIVE\INSTALL\groupuserenbled.txt

}

}

You can also complete this command for On-Premises users by modifying the script to use Get-ADGroupMember as shown below.

# Get Group Members

Get-ADGroupMember -Identity '#########' | export-csv -Path $env:HOMEDRIVE\INSTALL\#########.csv

This script can be modified to complete other provisioning based on Group Membership, just copy and paste into PowerShell ISE and make the necessary changes

Regards

The Author