Network 25375: GSA Licenses are available in the Tenant and assigned to users

[ashwinikarke]

No description provided.

[Copilot]

Pull request overview

Adds a new Zero Trust assessment test (Network pillar) to validate that Global Secure Access (GSA) licenses are present in the tenant and effectively assigned to users, with supporting remediation documentation.

Changes:

• Introduces Test-Assessment-25375 PowerShell test that queries Graph for subscribed SKUs and user license assignments, then reports pass/fail with a detailed markdown report section.
• Adds the corresponding markdown guidance file with remediation links and a %TestResult% placeholder.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

File	Description
src/powershell/tests/Test-Assessment.25375.ps1	New assessment test that checks GSA-related SKUs/service plans and summarizes user assignment.
src/powershell/tests/Test-Assessment.25375.md	New remediation/write-up page for the assessment result output.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[alexandair]

@ashwinikarke Please, address my feedback.

[alexandair]

@ashwinikarke Please, address my feedback.

[alexandair]

@ashwinikarke Could you try and test the following:

    try {
        $sqlUsers = @"
SELECT
    u.id,
    u.displayName,
    u.userPrincipalName,
    unnest.skuId::VARCHAR AS skuId,
    unnest.disabledPlans::VARCHAR[] AS disabledPlans
FROM "User" u,
    LATERAL UNNEST(u.assignedLicenses)
WHERE len(u.assignedLicenses) > 0
"@
        $userLicenses = @(Invoke-DatabaseQuery -Database $Database -Sql $sqlUsers -AsCustomObject -ErrorAction Stop)
    }

[ashwinikarke]

@ashwinikarke Could you try and test the following:

    try {
        $sqlUsers = @"
SELECT
    u.id,
    u.displayName,
    u.userPrincipalName,
    unnest.skuId::VARCHAR AS skuId,
    unnest.disabledPlans::VARCHAR[] AS disabledPlans
FROM "User" u,
    LATERAL UNNEST(u.assignedLicenses)
WHERE len(u.assignedLicenses) > 0
"@
        $userLicenses = @(Invoke-DatabaseQuery -Database $Database -Sql $sqlUsers -AsCustomObject -ErrorAction Stop)
    }

Updated!

[alexandair]

LGTM