Entra ID User Lifecycle PT 3

##Connects the Graph API to the current session. If prompted to login, do so.
Connect-MgGraph -Scopes 'User.ReadWrite.All'
#region Functions
#Functions to use in main CMDLET below
function DoesValueExist {
    param (
        [string]$value,
        [string]$property
    )

    $filter = "$property eq '$value'"
    $existingUser = Get-MgUser -Filter $filter -ErrorAction SilentlyContinue

    if ($null -ne $existingUser) {
        Write-Output "The value '$value' already exists for property '$property'."
        return $true
    }
    else {
        Write-Output "The value '$value' is available for property '$property'."
        return $false
    }
}


#Function prompts user for details and sets them to create user ID in Entra
function Get-BasicUserDetails{
    $firstName = Read-Host "Enter First Name"
    $lastName = Read-Host "Enter Last Name"
    $jobTitle = Read-Host "Job Title"

    
    $departmentName = Read-Host "Department"
    $managerNameStatic = Read-Host "Managers Email"
    
    $managerFind = Get-MgUser -Filter "userPrincipalName eq '$managerNameStatic'" -Top 1
    $manager = $managerFind.UserPrincipalName

    #Converts above data to useable outside function calls
    return [PSCustomObject]@{
        GivenName = $firstName
        LastName = $lastName
        JobTitle = $jobTitle
        DepartmentName = $departmentName
        Manager = $managerFind
    } 
}

function New-IdentityProfile {

    param(
        [string]$FirstName,
        [string]$LastName,
        [string]$Domain
    )

    # Normalize names
    $FirstName = $FirstName.ToLower().Replace(" ","")
    $LastName  = $LastName.ToLower().Replace(" ","")

    $counter = 0

    do {

        if ($counter -eq 0) {
            $upn = "$FirstName.$LastName$Domain"
            $mailNick = "$FirstName.$LastName"
        }
        else {
            $upn = "$FirstName.$LastName$counter$Domain"
            $mailNick = "$FirstName.$LastName$counter"
        }

        $existingUser = Get-MgUser -Filter "userPrincipalName eq '$upn'" -ErrorAction SilentlyContinue

        if ($existingUser) {
            Write-Host "UPN $upn already exists. Trying another..."
        }

        $counter++

    } while ($existingUser)

    $displayName = "$FirstName $LastName"

    return [PSCustomObject]@{
        UserPrincipalName = $upn
        MailNickname      = $mailNick
        DisplayName       = $displayName
    }
}

#EmployeeID Generator
function UniqueEmployeeID {
    do
    {
        $baseEmployeeID = (Get-Random -Minimum 0 -Maximum 99999).ToString('00000')  # Make random ID
        $checkallIDs = Get-MGUser -Filter "employeeId eq '$baseEmployeeID'" # Check to see if random ID is already in use 

        if($null -ne $checkallIDs)  # If the ID is already in use, loop will run again to generate a new one
        {
            Write-Host "Employee ID $baseEmployeeID already exists, generating a new one..."    # Write to console that the ID is already in use and a new one will be generated
        }
    }
    while ($null -ne $checkallIDs) # If The ID is not in use 
        Write-Host "EmployeeID is" $baseEmployeeID  # Write the unique Employee ID to the console
        return $baseEmployeeID  # Return the unique Employee ID to be used in the user creation
}

function password-Management{
    $adminChoice = Read-Host "Do you want to set an auto-generated password for the user? (Y/N)"

    if ($adminChoice -eq 'Y') {
        $generatedPassword = -join ((33..126) | Get-Random -Count 12 | ForEach-Object { [char]$_ }) # Generate a random password with 12 characters and 2 non-alphanumeric characters
        Write-Host "Generated Password: $generatedPassword" # Display the generated password to the admin
        $securePassword = $null
    }
    else {
        $securePassword = Read-Host 'Enter A Password For The User' -AsSecureString # Prompt the admin to enter a password and convert it to a secure string
        $generatedPassword = $null
    }

    return [PSCustomObject]@{
        AdminChoice = $adminChoice
        GeneratedPassword = $generatedPassword
        UserEnteredPassword = $securePassword
    }
}
#endregion

#Where CMDLETS Start

# Stored Vars
$domainName = '@davebrooks199909gmail.onmicrosoft.com'
$companyName = 'Miami PTC'
$employeeStartDate = Get-Date


#Store Message
$message = 'This script allows you to create a new user in Entra ID, please fill in as many details as possible.'
## Display message in the console regarding what this script does
Write-Output $message

## Wait time before printing next command in the console.
Start-Sleep -Seconds 5

# Get the static user details stored in the function 
$staticUserDetails = Get-BasicUserDetails #store hash data inside a variable
$staticUserDetails.Manager | Format-List ID,DisplayName,UserPrincipalName #write the manager details to the console to verify the correct manager was found
$employeeID = UniqueEmployeeID #generate unique employee ID and store it in a variable

$identity = New-IdentityProfile `
-FirstName $staticUserDetails.GivenName `
-LastName $staticUserDetails.LastName `
-Domain $domainName

#Call password choice function and store the results in a variable to be used in the user creation
$passwordmgmt = password-Management
#store hash data to pass into the user

$password= if($passwordmgmt.AdminChoice -eq 'Y'){
    $passwordmgmt.GeneratedPassword
}
else{
    $passwordmgmt.UserEnteredPassword
}

$passwordProfile = @{
    Password = $password
    ForceChangePasswordNextSignIn = $true
}

# Create the user 
$entraUserNew = New-MgUser -GivenName $staticUserDetails.GivenName -Surname $staticUserDetails.LastName -UserPrincipalName $identity.userPrincipalName `
-DisplayName $identity.DisplayName -MailNickname $identity.MailNickname -JobTitle $staticUserDetails.JobTitle -Department $staticUserDetails.DepartmentName -AccountEnabled -PasswordProfile $passwordProfile `
-EmployeeId $employeeID -CompanyName $companyName -EmployeeHireDate $employeeStartDate

#Assigns manager if manager is not assigned
#Need to find out why on prem user's cannot be set as managers
if (-not $staticUserDetails.Manager)
{
    Write-Output "No manager assigned, skipping manager assignment"
}
else
{
    Write-Output "Assigning manager..."

    Set-MgUserManagerByRef -UserId $entraUserNew.Id `
    -BodyParameter @{
        "@odata.id" = "https://graph.microsoft.com/v1.0/users/$($staticUserDetails.Manager.Id)"
    }
}