356 - Added Authentication check on Governance sub-module's cmdlets

module/Entra/Microsoft.Entra/Governance/Get-EntraDirectoryRoleAssignment.ps1

@@ -26,6 +26,15 @@ function Get-EntraDirectoryRoleAssignment {
         [System.String[]] $Property
     )
 
+    begin {
+        # Ensure connection to Microsoft Entra
+        if (-not (Get-EntraContext)) {
+            $errorMessage = "Not connected to Microsoft Graph. Use ' Connect-Entra -Scopes RoleManagement.Read.Directory, EntitlementManagement.Read.All ' to authenticate."
+            Write-Error -Message $errorMessage -ErrorAction Stop
+            return
+        }
+    }
+
     PROCESS {    
         $params = @{}
         $customHeaders = New-EntraCustomHeaders -Command $MyInvocation.MyCommand

module/Entra/Microsoft.Entra/Governance/Get-EntraDirectoryRoleDefinition.ps1

@@ -21,6 +21,16 @@ function Get-EntraDirectoryRoleDefinition {
         [Alias("Select")]
         [System.String[]] $Property
     )
+
+    begin {
+        # Ensure connection to Microsoft Entra
+        if (-not (Get-EntraContext)) {
+            $errorMessage = "Not connected to Microsoft Graph. Use 'Connect-Entra -Scopes RoleManagement.Read.Directory, EntitlementManagement.Read.All' to authenticate."
+            Write-Error -Message $errorMessage -ErrorAction Stop
+            return
+        }
+    }
+
     PROCESS {    
         $params = @{}
         $customHeaders = New-EntraCustomHeaders -Command $MyInvocation.MyCommand

module/Entra/Microsoft.Entra/Governance/New-EntraDirectoryRoleAssignment.ps1

@@ -16,6 +16,15 @@ function New-EntraDirectoryRoleAssignment {
         [System.String] $RoleDefinitionId
     )
 
+    begin {
+        # Ensure connection to Microsoft Entra
+        if (-not (Get-EntraContext)) {
+            $errorMessage = "Not connected to Microsoft Graph. Use 'Connect-Entra -Scopes RoleManagement.ReadWrite.Directory, EntitlementManagement.ReadWrite.All' to authenticate."
+            Write-Error -Message $errorMessage -ErrorAction Stop
+            return
+        }
+    }
+
     PROCESS {    
         $params = @{}
         $customHeaders = New-EntraCustomHeaders -Command $MyInvocation.MyCommand

module/Entra/Microsoft.Entra/Governance/New-EntraDirectoryRoleDefinition.ps1

@@ -28,6 +28,15 @@ function New-EntraDirectoryRoleDefinition {
         [System.String] $DisplayName
     )
 
+    begin {
+        # Ensure connection to Microsoft Entra
+        if (-not (Get-EntraContext)) {
+            $errorMessage = "Not connected to Microsoft Graph. Use 'Connect-Entra -Scopes RoleManagement.ReadWrite.Directory' to authenticate."
+            Write-Error -Message $errorMessage -ErrorAction Stop
+            return
+        }
+    }
+
     PROCESS {    
         $params = @{}
         $customHeaders = New-EntraCustomHeaders -Command $MyInvocation.MyCommand

module/Entra/Microsoft.Entra/Governance/Remove-EntraDirectoryRoleAssignment.ps1

@@ -10,6 +10,15 @@ function Remove-EntraDirectoryRoleAssignment {
         [System.String] $UnifiedRoleAssignmentId
     )
 
+    begin {
+        # Ensure connection to Microsoft Entra
+        if (-not (Get-EntraContext)) {
+            $errorMessage = "Not connected to Microsoft Graph. Use 'Connect-Entra -Scopes RoleManagement.ReadWrite.Directory, EntitlementManagement.ReadWrite.All' to authenticate."
+            Write-Error -Message $errorMessage -ErrorAction Stop
+            return
+        }
+    }
+
     PROCESS {    
         $params = @{}
         $customHeaders = New-EntraCustomHeaders -Command $MyInvocation.MyCommand

module/Entra/Microsoft.Entra/Governance/Remove-EntraDirectoryRoleDefinition.ps1

@@ -10,6 +10,15 @@ function Remove-EntraDirectoryRoleDefinition {
         [System.String] $UnifiedRoleDefinitionId
     )
 
+    begin {
+        # Ensure connection to Microsoft Entra
+        if (-not (Get-EntraContext)) {
+            $errorMessage = "Not connected to Microsoft Graph. Use 'Connect-Entra -Scopes RoleManagement.ReadWrite.Directory' to authenticate."
+            Write-Error -Message $errorMessage -ErrorAction Stop
+            return
+        }
+    }
+
     PROCESS {    
         $params = @{}
         $customHeaders = New-EntraCustomHeaders -Command $MyInvocation.MyCommand

module/Entra/Microsoft.Entra/Governance/Set-EntraDirectoryRoleDefinition.ps1

@@ -31,6 +31,15 @@ function Set-EntraDirectoryRoleDefinition {
         [System.String] $DisplayName
     )
 
+    begin {
+        # Ensure connection to Microsoft Entra
+        if (-not (Get-EntraContext)) {
+            $errorMessage = "Not connected to Microsoft Graph. Use 'Connect-Entra -Scopes RoleManagement.ReadWrite.Directory' to authenticate."
+            Write-Error -Message $errorMessage -ErrorAction Stop
+            return
+        }
+    }
+
     PROCESS {    
         $params = @{}
         $customHeaders = New-EntraCustomHeaders -Command $MyInvocation.MyCommand

module/docs/entra-powershell-v1.0/Governance/Remove-EntraDirectoryRoleAssignment.md

@@ -40,7 +40,7 @@ In delegated scenarios, the signed-in user must have either a supported Microsof
 ### Example 1: Remove a role assignment
 
 ```powershell
-Connect-Entra -Scopes 'RoleManagement.ReadWrite.Directory', 'EntitlementManagement.ReadWrite.All'1
+Connect-Entra -Scopes 'RoleManagement.ReadWrite.Directory', 'EntitlementManagement.ReadWrite.All'
 $user = Get-EntraUser -UserId '[email protected]'
 $role = Get-EntraDirectoryRoleDefinition -Filter "DisplayName eq 'Helpdesk Administrator'"
 $assignment = Get-EntraDirectoryRoleAssignment -All | Where-Object { $_.principalId -eq $user.Id -AND $_.RoleDefinitionId -eq $role.Id }

test/Entra/Governance/Get-EntraDirectoryRoleAssignment.Tests.ps1

@@ -27,6 +27,15 @@ BeforeAll {
     }
 
     Mock -CommandName Get-MgRoleManagementDirectoryRoleAssignment -MockWith $scriptblock -ModuleName Microsoft.Entra.Governance
+
+    Mock -CommandName Get-EntraContext -MockWith {
+        @{
+            Environment = @{
+                Name = "Global"
+            }
+            Scopes      = @('RoleManagement.Read.Directory', 'EntitlementManagement.Read.All')
+        }
+    } -ModuleName Microsoft.Entra.Governance
 }
 
 Describe "Get-EntraDirectoryRoleAssignment" {

test/Entra/Governance/Get-EntraDirectoryRoleDefinition.Tests.ps1

@@ -30,6 +30,15 @@ BeforeAll {
     }
 
     Mock -CommandName Get-MgRoleManagementDirectoryRoleDefinition -MockWith $scriptblock -ModuleName Microsoft.Entra.Governance
+
+    Mock -CommandName Get-EntraContext -MockWith {
+        @{
+            Environment = @{
+                Name = "Global"
+            }
+            Scopes      = @('RoleManagement.Read.Directory', 'EntitlementManagement.Read.All')
+        }
+    } -ModuleName Microsoft.Entra.Governance
 }
 
 Describe "Get-EntraDirectoryRoleDefinition" {

test/Entra/Governance/New-EntraDirectoryRoleAssignment.Tests.ps1

@@ -27,6 +27,15 @@ BeforeAll {
     }
 
     Mock -CommandName New-MgRoleManagementDirectoryRoleAssignment -MockWith $scriptblock -ModuleName Microsoft.Entra.Governance
+
+    Mock -CommandName Get-EntraContext -MockWith {
+        @{
+            Environment = @{
+                Name = "Global"
+            }
+            Scopes      = @('RoleManagement.ReadWrite.Directory', 'EntitlementManagement.ReadWrite.All')
+        }
+    } -ModuleName Microsoft.Entra.Governance
 }
 
 Describe "New-EntraDirectoryRoleAssignment" {

test/Entra/Governance/New-EntraDirectoryRoleDefinition.Tests.ps1

@@ -29,6 +29,15 @@ BeforeAll {
     }
 
     Mock -CommandName New-MgRoleManagementDirectoryRoleDefinition -MockWith $scriptblock -ModuleName Microsoft.Entra.Governance
+
+    Mock -CommandName Get-EntraContext -MockWith {
+        @{
+            Environment = @{
+                Name = "Global"
+            }
+            Scopes      = @('RoleManagement.ReadWrite.Directory')
+        }
+    } -ModuleName Microsoft.Entra.Governance
 }
 
 Describe "New-EntraDirectoryRoleDefinition" {

test/Entra/Governance/Remove-EntraDirectoryRoleAssignment.Tests.ps1

@@ -8,6 +8,15 @@ BeforeAll {
     Import-Module (Join-Path $PSScriptRoot "..\..\Common-Functions.ps1") -Force
 
     Mock -CommandName Remove-MgRoleManagementDirectoryRoleAssignment -MockWith {} -ModuleName Microsoft.Entra.Governance
+
+    Mock -CommandName Get-EntraContext -MockWith {
+        @{
+            Environment = @{
+                Name = "Global"
+            }
+            Scopes      = @('RoleManagement.ReadWrite.Directory', 'EntitlementManagement.ReadWrite.All')
+        }
+    } -ModuleName Microsoft.Entra.Governance
 }
 
 Describe "Remove-EntraDirectoryRoleAssignment" {

test/Entra/Governance/Remove-EntraDirectoryRoleDefinition.Tests.ps1

@@ -8,6 +8,15 @@ BeforeAll {
     Import-Module (Join-Path $PSScriptRoot "..\..\Common-Functions.ps1") -Force
 
     Mock -CommandName Remove-MgRoleManagementDirectoryRoleDefinition -MockWith {} -ModuleName Microsoft.Entra.Governance
+
+    Mock -CommandName Get-EntraContext -MockWith {
+        @{
+            Environment = @{
+                Name = "Global"
+            }
+            Scopes      = @('RoleManagement.ReadWrite.Directory')
+        }
+    } -ModuleName Microsoft.Entra.Governance
 }
 
 Describe "Remove-EntraDirectoryRoleDefinition" {

test/Entra/Governance/Set-EntraDirectoryRoleDefinition.Tests.ps1

@@ -8,6 +8,15 @@ BeforeAll {
     Import-Module (Join-Path $PSScriptRoot "..\..\Common-Functions.ps1") -Force
 
     Mock -CommandName Update-MgRoleManagementDirectoryRoleDefinition -MockWith {} -ModuleName Microsoft.Entra.Governance
+
+    Mock -CommandName Get-EntraContext -MockWith {
+        @{
+            Environment = @{
+                Name = "Global"
+            }
+            Scopes      = @('RoleManagement.ReadWrite.Directory')
+        }
+    } -ModuleName Microsoft.Entra.Governance
 }
 
 Describe "Set-EntraDirectoryRoleDefinition" {