Problems with .update() method to change conditional access policy for SPO site using PNP.

[vindi4i]

Hello,

I am trying to change conditional access policy for SharePoint Online site using PNP.
I did this previously using code:

$url = 'https://companygroup.sharepoint.com/sites/TeamBlockPolicy'
Connect-pnponline $url -useweblogin
$context = Get-PnPContext
$site = Get-PnPTenantSite -Url $url
$site.ConditionalAccessPolicy = [Microsoft.Online.SharePoint.TenantManagement.SPOConditionalAccessPolicyType]::BlockAccess
$site.Update()
Invoke-PnPQuery

Code above not working anymore. When I call $site.Update() I get error:
'Method invocation failed because [PnP.PowerShell.Commands.Model.SPOSite] does not contain a method named 'Update'.'
Command "$site | gm" does not show method 'Update'.

However if I import legacy module SharePointPnPPowerShellOnline everything works fine. .

Could someone explain how conditional access policy for SPO site can be configured using new PNP?

PNP : 1.2.0
SharePointPnPPowerShellOnline 3.29.2101.0
PowerShell : 5.1

[YuriySamorodov]

Hey @vindi4i
Have you considered the following command?
Set-PnPTenantSite -ConditionalAccessPolicy BlockAccess

[erwinvanhunen]

As we, in the Set-PnPTenantSite do -exactly- the same thing as Set-SPOSite (the only thing we can do is consume the APIs provided to us) and it behaves not correctly, then it seems to be an issue on the server end, of which we have no control unfortunately.

[erwinvanhunen]

From the documentation about conditional access policies I see that you require to have an Azure AD Premium P1 license. Do you have that in place?

https://docs.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices (first note)
and
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview#license-requirements

[YuriySamorodov]

@erwinvanhunen Personally I have Azure AD Premium P1, however I am authenticating with an app,,,

[YuriySamorodov]

Set-PnPTenantSite cmdlet does have a -ConditionalAccessPolicy parameter. We try to get the docs updated, but as we all have to do this in our free time, it can take some time.

@erwinvanhunen , it looks like ConditionalAccessPolicy is available with IntelliSense for me:

[erikcp1975]

As of 3.29.2101.0 SharePointPnPPowerShellOnline, -conditionalaccesspolicy does not work.
In addition PNP doesn't seem to support the new Conditional Access policy, authentication-context with sensitivity label's
https://docs.microsoft.com/en-us/sharepoint/authentication-context-example

[YuriySamorodov]

#231