Automatic Provisioning Power Platform Hands-on-Labs Environment

01-install-azuread.ps1

Install-Module -Name AzureAD `
    -Scope AllUsers -Repository PSGallery `
    -Force -AllowClobber

02-connect-azuread.ps1

$tenantName = "powerplatformhandsonlab"
$adminUpn = "admin@$tenantName.onmicrosoft.com"
$adminPW = ConvertTo-SecureString "Pa`$`$W0rd!@#`$" -AsPlainText -Force
$adminCredential = New-Object `
    -TypeName System.Management.Automation.PSCredential `
    -ArgumentList ($adminUpn, $adminPW)

$connected = Connect-AzureAD -Credential $adminCredential

03-new-azureaduser.ps1

$userPWProfile = New-Object -TypeName Microsoft.Open.AzureAD.Model.PasswordProfile
$userPWProfile.Password = "UserPa`$`$W0rd!@#`$"
$userPWProfile.EnforceChangePasswordPolicy = $false
$userPWProfile.ForceChangePasswordNextLogin = $false

$usageLocation = "KR"

$users = @()
(1..24) | ForEach-Object {
    $user = New-AzureADUser `
        -DisplayName $("PPUser" + $_.ToString("00")) -GivenName $("User" + $_.ToString("00")) -SurName "PP" `
        -UserPrincipalName $("ppuser" + $_.ToString("00") + "@$tenantName.onmicrosoft.com") `
        -UsageLocation $usageLocation `
        -MailNickName $("ppuser" + $_.ToString("00")) `
        -PasswordProfile $userPWProfile `
        -AccountEnabled $true

    $users += $user
}

04-get-azureaddirectoryrole.ps1

$roleName="Power Platform Administrator"

$role = Get-AzureADDirectoryRole | Where-Object { $_.DisplayName -eq $roleName }
if ($role -eq $null) {
    $roleTemplate = Get-AzureADDirectoryRoleTemplate | Where-Object { $_.DisplayName -eq $roleName }
    $enabled = Enable-AzureADDirectoryRole -RoleTemplateId $roleTemplate.ObjectId

    $role = Get-AzureADDirectoryRole | Where-Object { $_.DisplayName -eq $roleName }
}

05-add-azureaddirectoryrolemember.ps1

$users | ForEach-Object {
    $assigned = Add-AzureADDirectoryRoleMember `
        -ObjectId $role.ObjectId `
        -RefObjectId $_.ObjectId
}

06-get-azureadsubscribedsku.ps1

Get-AzureADSubscribedSku

07-set-azureaduserlicense.ps1

$sku = Get-AzureADSubscribedSku

$license = New-Object -TypeName Microsoft.Open.AzureAD.Model.AssignedLicense
$license.SkuId = $sku.SkuId

$licensesToAssign = New-Object -TypeName Microsoft.Open.AzureAD.Model.AssignedLicenses
$licensesToAssign.AddLicenses = $license

$users | ForEach-Object {
    $assigned = Set-AzureADUserLicense -ObjectId $_.ObjectId -AssignedLicenses $licensesToAssign
}

08-install-powerapps.ps1

Install-Module -Name Microsoft.PowerApps.Administration.PowerShell `
    -Scope AllUsers -Repository PSGallery `
    -Force -AllowClobber

Install-Module -Name Microsoft.PowerApps.PowerShell `
    -Scope AllUsers -Repository PSGallery `
    -Force -AllowClobber

09-add-powerappsaccount.ps1

$connected = Add-PowerAppsAccount -Username $adminUpn -Password $adminPW

10-new-adminpowerappcdsdatabase.ps1

$paenv = Get-AdminPowerAppEnvironment -Default
if ($paenv.CommonDataServiceDatabaseProvisioningState -ne "Succeeded") {
    $currency = Get-AdminPowerAppCdsDatabaseCurrencies `
        -LocationName $paenv.Location | Where-Object {
            $_.IsTenantDefaultCurrency -eq $true
        }

    $language = Get-AdminPowerAppCdsDatabaseLanguages `
        -LocationName $paenv.Location | Where-Object {
            $_.IsTenantDefaultLanguage -eq $true
        }

    $activated = New-AdminPowerAppCdsDatabase `
        -EnvironmentName $paenv.EnvironmentName `
        -CurrencyName $currency.CurrencyName `
        -LanguageName $language.LanguageName
}

11-connect-azaccount.ps1

$connected = Connect-AzAccount -Credential $adminCredential

12-install-az.ps1

Install-Module -Name Az -Scope AllUsers -Repository PSGallery -Force -AllowClobber

13-register-azresourceprovider.ps1

$namespaces = @(
    "Microsoft.Logic",
    "Microsoft.Storage",
    "Microsoft.Network",
    "Microsoft.ApiManagement",
    "Microsoft.DocumentDB"
)

$namespaces | ForEach-Object {
    $provider = Get-AzResourceProvider `
        -ProviderNamespace $_ | Where-Object { $_.RegistrationState -eq "Registered" }
    if (($provider -eq $null) -or ($provider.Count -eq 0)) {
        $registered = Register-AzResourceProvider -ProviderNamespace $_
    }
}

14-new-azroleassignment.ps1

$role = Get-AzRoleDefinition | Where-Object { $_.Name -eq "Contributor" }
$location = "koreacentral"

$users | ForEach-Object {
    $rg = Get-AzResourceGroup | Where-Object {
        $_.ResourceGroupName -eq $("rg-" + $_.MailNickName)
    }
    if ($rg -eq $null) {
        $rg = New-AzResourceGroup `
            -Name $("rg-" + $_.MailNickName) `
            -Location $location
    }

    $assigned = New-AzRoleAssignment `
        -ObjectId $_.ObjectId `
        -RoleDefinitionId $role.Id `
        -Scope $rg.ResourceId
}

15-set-environment.ps1

./Set-Environment.ps1 `
    -AdminUsername "admin" `
    -AdminPassword "Pa`$`$W0rd!@#`$" `
    -TenantName "powerplatformhandsonlab"