Script Repository

$attributeName = "seeAlso" # TODO: modify me
$certificateThumbprint = "9BCE7405DD63FD8DE7486FDD32D111667197BB8E" # TODO: modify me
$usernameMicrosoft365PropertyName = "userPrincipalName" # TODO: modify me
$tenantName = "MyTenant" # TODO: modify me
$adminURL = "https://$tenantName-admin.sharepoint.com" # TODO: modify me

# Get Microsoft 365 username
try
{
    $usernameMicrosoft365 = $Context.TargetObject.Get($usernameMicrosoft365PropertyName)
}
catch
{
    $Context.LogMessage("Property $usernameMicrosoft365PropertyName is empty for user %fullname%.", "Warning")
    return
}

$userDNs = @()
try
{
    # Get manager of the user
    $managerDN = $Context.TargetObject.Get("manager")
    $userDNs += $managerDN
}
catch
{
    $Context.LogMessage("The user %fullname% has no manager.", "Warning")
}

try
{
    # Get other users to gain permissions
    $values = $Context.TargetObject.GetEx($attributeName)
    $values | %%{$userDNs += $_}
}
catch
{
    $Context.LogMessage("No additional delegates are specified.", "Warning")
}

if ($userDNs.Length -eq 0)
{
    return
}

# Build OneDrive URL
$charsToReplace = @(".", "@")
$charsToReplace | %%{$usernameMicrosoft365 = $usernameMicrosoft365.Replace($_, "_")}
$oneDriveSiteURL = "https://$tenantName-my.sharepoint.com/personal/$usernameMicrosoft365"

# Connecto to SharePoint Online
$tenant = $Context.CloudServices.GetO365Tenant()
$credential = $tenant.GetCredential()

try
{
    $connection = Connect-PnPOnline -Url $adminURL -ClientId $credential.AppId -Thumbprint $certificateThumbprint -Tenant "$tenantName`.onmicrosoft.com" -ReturnConnection
    
    # Add permissions
    foreach ($dn in $userDNs)
    {
        $user = $Context.BindToObjectByDN($dn)
        try
        {
            $userID = $user.Get($usernameMicrosoft365PropertyName)
        }
        catch
        {
            $Context.LogMessage("Property $usernameMicrosoft365PropertyName is empty for user with DN '$dn'.", "Warning")
            continue
        }
        
        try
        {
            $profile = Get-PnPUserProfileProperty -Account $userID -Connection $connection -ErrorAction Stop
        }
        catch
        {
            $Context.LogMessage("An error occured when getting profile for $userID. Error: " + $_.Exception.Message, "Warning")
            continue
        }
        
        try
        {
            Set-PnPTenantSite -Identity $oneDriveSiteURL -Owners $profile.AccountName -Connection $connection -ErrorAction Stop
        }
        catch
        {
            $Context.LogMessage("An error occured when adding permission for $userName. Error: " + $_.Exception.Message, "Warning")
        }
    }
}
finally
{
    # Close the connection and release resources
    if ($connection) { Disconnect-PnPOnline -Connection $connection }
}