InforcerCommunity PowerShell Module

PowerShell Gallery CI License: MIT

Community PowerShell module for the Inforcer API. Connect, query tenants, baselines, policies, alignment scores, and audit events with consistent parameters and output.

About

This module was created by Roy Klooster for the community. It is not owned or officially maintained by Inforcer; it is a community project built by a community member to make it easier to work with the Inforcer API from PowerShell.

• Repository: https://github.com/royklo/InforcerCommunity
• PowerShell Gallery: https://www.powershellgallery.com/packages/InforcerCommunity

Repository structure

InforcerCommunity/
├── README.md                 # This file
├── LICENSE                   # MIT (community project disclaimer)
├── CONTRIBUTING.md           # How to contribute, fork & PR
├── .gitignore
├── .github/
│   ├── ISSUE_TEMPLATE/       # Bug report, feature request
│   ├── PULL_REQUEST_TEMPLATE.md
│   └── workflows/            # build-and-test.yml
├── docs/
│   ├── CMDLET-REFERENCE.md   # Parameters and example output
│   └── API-REFERENCE.md      # API schemas and response structures
├── CHANGELOG.md              # Release history
├── module/                 # Script module (see module/README.md)
│   ├── InforcerCommunity.psd1
│   ├── InforcerCommunity.psm1
│   ├── InforcerCommunity.Format.ps1xml
│   ├── InforcerCommunity.Types.ps1xml
│   ├── README.md
│   ├── Public/               # Exported cmdlets (incl. Export-InforcerTenantDocumentation)
│   └── Private/              # Helpers (API, session, aliases, renderers, Graph, etc.)
└── Tests/
    └── Consistency.Tests.ps1  # Pester tests

Prerequisites

• PowerShell 7.0+ (cross-platform: Windows, macOS, Linux)
• An Inforcer API key (from your Inforcer tenant)

Installation

From PowerShell Gallery (recommended)

Install-Module -Name InforcerCommunity -Scope CurrentUser

From source (GitHub)

git clone https://github.com/royklo/InforcerCommunity.git
cd InforcerCommunity
Import-Module ./module/InforcerCommunity.psd1 -Force

Always run Import-Module from the repository root and use ./module/InforcerCommunity.psd1. If you see an error about Inforcer.Format.ps1xml or a path containing Inforcer-Powershell-Module, you are loading the manifest from the wrong directory or an old copy of the repo; switch to the InforcerCommunity repo root and use the path above.

Quick start

# Connect with your API key
Connect-Inforcer -ApiKey "your-api-key" -Region uk

# List tenants
Get-InforcerTenant

# Get alignment score table
Get-InforcerAlignmentDetails

# Get policies for a tenant
Get-InforcerTenantPolicies -TenantId 482

# Show policy changes (PolicyDiff on each tenant when available)
Get-InforcerTenant | Select-Object ClientTenantId, TenantFriendlyName, PolicyDiff

# Generate tenant documentation as HTML. -OutputPath is what writes the file: omit it and the
# DocModel is returned instead, so you can read the configuration without producing artefacts.
# The report opens in your browser automatically, unless you are on a CI runner or pass -Show:$false.
Export-InforcerTenantDocumentation -Format Html -TenantId 482 -OutputPath ./docs

# Generate documentation for a specific baseline with Graph group name resolution
Connect-Inforcer -ApiKey "your-api-key" -Region uk -FetchGraphData
Export-InforcerTenantDocumentation -Format Html -TenantId 482 -Baseline "Production" -FetchGraphData -OutputPath ./docs

# Disconnect when done
Disconnect-Inforcer

Cmdlets

Cmdlet	Description
Connect-Inforcer	Establishes a secure connection to the Inforcer REST API. Supports -FetchGraphData to also connect Microsoft Graph.
Disconnect-Inforcer	Disconnects and clears the session (including Graph if connected).
Test-InforcerConnection	Tests the API connection; returns $true or $false.
Get-InforcerTenant	Retrieves tenant information (optional filter by TenantId).
Get-InforcerBaseline	Retrieves baseline groups and members.
Get-InforcerTenantPolicies	Retrieves policies for a specified tenant.
Get-InforcerAlignmentDetails	Retrieves alignment scores (table or raw format).
Get-InforcerAuditEvent	Retrieves audit events (optional EventType, date range; -EventType has tab completion).
Get-InforcerSupportedEventType	Returns the canonical list of audit event types accepted by Get-InforcerAuditEvent -EventType. Drives the tab completer; cached after first call.
Get-InforcerUser	Retrieves users from a tenant (list/search or detail by UserId).
Get-InforcerGroup	Retrieves Entra ID groups from a tenant (list/search or detail by GroupId).
Get-InforcerRole	Retrieves Entra ID directory role definitions from a tenant.
Get-InforcerSecureScore	Retrieves the current and 90-day historic Microsoft Secure Score for a tenant, including per-category scores and actionable control profiles.
Export-InforcerTenantDocumentation	Generates comprehensive tenant documentation in HTML, Markdown, or Excel format. Pass -OutputPath to write files; without it the DocModel is returned and nothing is written.
Compare-InforcerEnvironments	Compares two tenants' Intune configuration and generates an interactive HTML comparison report. Pass -OutputPath to write the file; without it the comparison model is returned and nothing is written. Supports baseline-scoped comparison via -SourceBaselineId / -DestinationBaselineId with automatic baseline owner resolution.
Get-InforcerAssessment	Lists available assessments (CIS, Essential Eight, etc.).
Invoke-InforcerAssessment	Runs an assessment against one or more tenants. Supports HTML/CSV export.
Get-InforcerReportType	Lists the report catalog from the Reports API. Cached after first call; supports -Key, -Tag, and -OutputFormat filters.
Invoke-InforcerReport	Queues a report run, polls until complete, and saves outputs to disk. Use -NoWait for async or -NoSave to download metadata only.
Get-InforcerReportRun	Lists report runs (last 7 days, capped at 500). Use -Wait with -RunId to bypass the 4-minute list propagation lag.
Save-InforcerReportOutput	Downloads a report output to disk using the server's Content-Disposition filename. Pipeline-friendly for bulk download.

For full parameter details and example output, see Cmdlet Reference. For detailed API schemas and response structures, see API Reference.

Settings Catalog data

The Export-InforcerTenantDocumentation cmdlet resolves Intune Settings Catalog settingDefinitionIDs to friendly names using data from the IntuneSettingsCatalogData repository. This data (~65 MB) is automatically downloaded and cached on first use at ~/.inforcercommunity/data/settings.json with a 24-hour TTL.

• No manual setup required — the module handles download, caching, and freshness checks automatically
• Offline support — if the download fails, the module uses a stale cached copy (or proceeds without resolution, showing raw IDs)
• Override — use -SettingsCatalogPath to point to a local settings.json file instead

The data is refreshed nightly from Microsoft Graph by a GitHub Actions workflow in the IntuneSettingsCatalogData repo.

Contributing

We welcome contributions: fork the repo, make your changes, and open a pull request. See CONTRIBUTING.md for the workflow, code style, and how to report bugs.

Issues

Found a bug or have a feature idea? Please open an issue:

• Bug report
• Feature request

License

MIT — This module was created by Roy Klooster for the community. It is not owned or officially maintained by Inforcer; it is a community project built by a community member to make it easier to work with the Inforcer API from PowerShell.

---