# MS Graph PowerShell Modules Docs:
https://docs.microsoft.com/en-us/powershell/microsoftgraph/overview

# Installation (Run those commands – one
time setup)

#  
Set-ExecutionPolicy –ExecutionPolicy
RemoteSigned -Scope CurrentUser

#  
Install-Module Microsoft.Graph -Scope CurrentUser

#  
Import-Module Microsoft.Graph

# INPUTS

$siteId = "<Your GUID>" ###—> ENTER SHAREPOINT SITE ID HERE BY
ACCESSING HTTPS://SITE.sharepoint.com/sites/GeneralComm/_api/site/id

$appDisplayName = "Target App" ###—> ENTRA ID REGISTERED APPLICATION
NAME

$permission = "write"

# CONNECT

Connect-MgGraph -Scopes "Sites.Read.All","Sites.FullControl.All"

Connect-AzureAD

$sp = Get-AzureADServicePrincipal –SearchString $appDisplayName 

$appId = $sp.AppId

$site = Get-MGSite –SiteId $siteId

# TEST – Get Current Permissions

Write-Host "Before the update" –ForegroundColor Green

$permissions = Get-MgSitePermission –SiteId $siteId

$permissions | Select –ExpandProperty GrantedToIdentities | Select –ExpandProperty Application

# ADD – new Service Principal

$body = @{

  ‘roles’ = @(

      $permission

   );

  ‘grantedToIdentities‘ = @(

      @{

        ‘application’ = @{

          ‘id’ = $appId

          ‘displayName‘ = $appDisplayName

        }

      }

   );

}

$bodyJson = $body | ConvertTo-Json -Depth 10 -Compress

Invoke-MgGraphRequest `

    -Method POST `

    -Uri "v1.0/sites/$SiteId/permissions" `

    -Body $bodyJson

# TEST – Get Updated Permissions

Write-Host "After the update" –ForegroundColor Green

$permissions = Get-MgSitePermission –SiteId $siteId

$permissions | Select –ExpandProperty GrantedToIdentities | Select –ExpandProperty Application

<#

This sample script is not supported under
any Microsoft standard support program or service.

The sample script is provided AS IS without
warranty of any kind.

Microsoft further disclaims all implied
warranties including, without limitation, any implied warranties of
merchantability or of fitness for a particular purpose.

The entire risk arising out of the use or
performance of the sample scripts and documentation remains with you.

In no event shall Microsoft, its authors,
or anyone else involved in the creation, production, or delivery of the
scripts be liable for any damages whatsoever (including, #without limitation,
damages for loss of business profits, business interruption, loss of business
information, or other pecuniary loss) arising out of the use of or inability
to use the sample scripts or documentation, even if Microsoft has been
advised of the possibility of such damages

#>

#Initialize Variables 1

$Machine = $env:COMPUTERNAME

$root = "C:\ProgramData\Intune"

$timestamp = Get-Date -Format "yyyyMMdd_HHmmss"

$csvPath = "$($root)\$($Machine)_$timestamp.csv"

#Initialize Variables 2

#$global:authToken
= $null

$global:TenantID = ""  ## UPDATE TENANT ID

$global:ClientID = ""  ## UPDATE ENTRA ID APPLICATION ID

$global:ClientSecret = "" ## UPDATE CLIENT SECRET KEY

#Initialize Variables 3

$siteId = "<Your GUID>" # SPECIFY SHAREPOINT SITE ID

$folderPath = "/Files" #"/content"  # Path to the SharePoint folder
where you want to upload the file

$accessTokenUrl = "https://login.microsoftonline.com/$tenantId/oauth2/v2.0/token"

$graphApiUrl = "https://graph.microsoft.com/v1.0/sites/$siteId/drive/items/root:$folderPath/"

# BEGIN

####################################################

# Function to retrieve auth token

Function Get-AuthToken {

       param(

             [Parameter(Mandatory=$true)]

             $TenantID,

             [Parameter(Mandatory=$true)]

             $ClientID,

             [Parameter(Mandatory=$true)]

             $ClientSecret

       )

       try{

             # Define parameters for Microsoft Graph
access token retrieval

             $resource = "https://graph.microsoft.com&quot;

             $authority = "https://login.microsoftonline.com/$TenantID"

             $tokenEndpointUri = "$authority/oauth2/token"

             # Get the access token using grant type client_credentials for Application Permissions

             $content = "grant_type=client_credentials&client_id=$ClientID&client_secret=$ClientSecret&resource=$resource"

             $response = Invoke-RestMethod -Uri $tokenEndpointUri -Body $content -Method Post –UseBasicParsing

             #Write-Host "Got new Access
Token!" –ForegroundColor Green

        Write-Log -Message "Got new Access Token!" -severity 1 -component "UploadFile"

             # If the accesstoken
is valid then create the authentication header

             if($response.access_token){

             # Creating header for Authorization token

             $authHeader = @{

                    ‘Content-Type’=‘application/json‘

                    ‘Authorization’="Bearer " + $response.access_token

                    ‘ExpiresOn‘=$response.expires_on

                    }

             return $authHeader

             }

             else{

                    Write-Error "Authorization Access Token is null,
check that the client_id and client_secret
is correct…"

                    break

             }

       }

       catch{

             #FatalWebError -Exception $_.Exception -Function "Get-AuthToken"

       }

}

####################################################

####################################################

# Function to calculate folder size

Function Get-FolderSize {

    param (

        [string]$folderPath

    )

    $folder = Get-Item $folderPath

    if ($folder -is [System.IO.DirectoryInfo]) {

        $size = 0

        Get-ChildItem $folder -Recurse | ForEach-Object {

            $size += $_.Length

        }

        return $size

    } else {

        return 0

    }

}

####################################################

####################################################

# LogWrite
function

Function Write-Log {

    PARAM(

         [String]$Message,

         [String]$Path = "$root\UploadFile.Log",

         [int]$severity,

         [string]$component

         )

         $TimeZoneBias = Get-CimInstance -Query "Select Bias from Win32_TimeZone"

         $Date = Get-Date -Format "HH:mm:ss.fff"

         $Date2 = Get-Date -Format "MM-dd-yyyy"

         $type =1

         "<![LOG[$Message]LOG]!><time=$([char]34)$date$($TimeZoneBias.bias)$([char]34) date=$([char]34)$date2$([char]34) component=$([char]34)$component$([char]34) context=$([char]34)$([char]34) type=$([char]34)$severity$([char]34) thread=$([char]34)$([char]34) file=$([char]34)$([char]34)>"| Out-File –FilePath $Path -Append –NoClobber -Encoding default

}

####################################################

# Create Root folder

if(!(Test-path $root)) { New-Item $root -ItemType Directory -Force | %{$_.Attributes = "hidden"} | out-null }

Write-Log -Message " " -severity 1 -component "UploadFile"

Write-Log -Message "Computer name: $($Machine)" -severity 1 -component "UploadFile"

Write-Log -Message "Root folder: $($root)" -severity 1 -component "UploadFile"

Write-Log -Message "Sharepoint
URL: $($graphApiUrl)" -severity 1 -component "UploadFile"

# Retrieve Token

$global:authToken = Get-AuthToken –TenantID $global:TenantID -ClientID $global:ClientID –ClientSecret $global:ClientSecret

Invoke-RestMethod -Method Get -Uri "https://graph.microsoft.com/v1.0/sites/$siteId" -Headers $global:authToken

# Get user profile folder

$userProfile = [System.IO.Path]::Combine($env:USERPROFILE, "Desktop")

# Get sizes of Desktop, Documents, and
Pictures folders

$desktopSize = $((Get-FolderSize "$env:USERPROFILE\Desktop") / 1MB)

$documentsSize = $((Get-FolderSize "$env:USERPROFILE\Documents") / 1MB)

$picturesSize = $((Get-FolderSize "$env:USERPROFILE\Pictures") / 1MB)

Write-Log -Message "Retrieved file sizes" -severity 1 -component "UploadFile"

# Hash table

$table = @()

$table += New-Object -TypeName PSCustomObject -Property @{

MachineName = $Machine

Desktop = "$([math]::Round($desktopSize,2)) MB"

Documents = "$([math]::Round($documentsSize,2)) MB"

Pictures = "$([math]::Round($picturesSize,2)) MB"

ExecutionTime = get-date -Format g

}

$table | select MachineName, Desktop, Documents, Pictures, ExecutionTime | export-csv -Path $csvPath –NoTypeInformation

$localFilePath = (Get-ChildItem -path "C:\ProgramData\Intune" -Filter *.csv –ErrorAction SilentlyContinue | Sort-Object -Descending | select -First 1).FullName

Write-Log -Message "Report exported" -severity 1 -component "UploadFile"

Write-Log -Message "Local file: $($localFilePath)" -severity 1 -component "UploadFile"

####################################################

# Function to retrieve auth token

Function Upload-File {

       param(

             [Parameter(Mandatory=$true)]

             $URL,

             [Parameter(Mandatory=$true)]

             $Token,

             [Parameter(Mandatory=$true)]

             $ContentType,

        [Parameter(Mandatory=$true)]

             $File

       )

       try

        {

                 $uploadUrl = $URL + (Split-Path $File -Leaf) + ":/content"

            $result = Invoke-RestMethod -Uri $uploadUrl -Method Put -Headers $Token –InFile $File -ContentType $ContentType

            if($result.‘@microsoft.graph.downloadUrl‘)

                {

                    Write-Log -Message "File uploaded" -severity 1 -component "UploadFile"

                }

        }

       catch

        {

                 Write-Log -Message "Failed to upload file due to $($_.exception.message)" -severity 2 -component "UploadFile"

          
}

}

####################################################

Upload-File -URL $graphApiUrl -Token $global:authToken -File $localFilePath -ContentType "application/octet-stream"