user_operations.py

from azure.common.credentials import ServicePrincipalCredentials
from azure.graphrbac import GraphRbacManagementClient
from azure.graphrbac.models import PasswordProfile, SignInName, UserUpdateParameters
from hisc_user_create_parameters import HISCUserCreateParameters

def create_user(fname, lname, email, franchises, config):
	return client(config).users.create(_user_create_parameters(fname, lname, email, franchises, config))

def update_user(object_id, franchises, config):
	return client(config).users.update(object_id, _user_update_parameters(franchises))

def client(config):
	return GraphRbacManagementClient(_credentials(config), config['tenant_id'])

def _user_update_parameters(franchises):
	return UserUpdateParameters(additional_properties={'extension_e26ba073fd5142af9fa6455daecdcc9c_franchises': franchises})

def _user_create_parameters(fname, lname, email, franchises, config):
	return HISCUserCreateParameters(
		additional_properties={'extension_e26ba073fd5142af9fa6455daecdcc9c_franchises': franchises},
		account_enabled=True,
		display_name='{}.{}'.format(fname, lname),
		password_profile=_password_profile(config),
		user_principal_name=_principle_name(email, config),
		mail_nickname=_mail_nickname(email),
		given_name=fname,
		surname=lname,
		user_type='Guest',
		other_mails=[email],
		sign_in_names=[_sign_in_name(email)],
		usage_location='US',
		creation_type='LocalAccount'
    )

def _principle_name(email, config):
	return config['principle_template'].format(_mail_nickname(email))

def _mail_nickname(email):
	return '{}#EXT#'.format(_format_email(email))

def _format_email(email):
	return email.replace('@', '_')

def _credentials(config):
	return ServicePrincipalCredentials(client_id=config['client_id'], secret=config['client_key'], tenant=config['tenant_id'], resource=config['ad_graph_url'])

def _password_profile(config):
	return PasswordProfile(password=config['default_password'], force_change_password_next_login=True)

def _sign_in_name(email):
	return SignInName(type='emailAddress', value=email)