create add tenant api

Author: JohnDuprey

Modules/CIPPCore/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-AddTenant.ps1

@@ -0,0 +1,146 @@
+function Invoke-AddTenant {
+    <#
+    .FUNCTIONALITY
+        Entrypoint,AnyTenant
+    .ROLE
+        Tenant.Config.ReadWrite
+    #>
+    [CmdletBinding()]
+    param($Request, $TriggerMetadata)
+
+    $APIName = $Request.Params.CIPPEndpoint
+    Write-LogMessage -headers $Request.Headers -API $APINAME -message 'Accessed this API' -Sev 'Debug'
+
+    switch ($Request.Body.Action) {
+        'ValidateDomain' {
+            # Validate the onmicrosoft.com domain
+            $Domain = "$($Request.Body.TenantName).onmicrosoft.com"
+            $DomainCheckUri = "https://api.partnercenter.microsoft.com/v1/domains/$Domain"
+            try {
+                $DomainCheckResponse = New-GraphPOSTRequest -type HEAD -uri $DomainCheckUri -scope 'https://api.partnercenter.microsoft.com/.default' -NoAuthCheck $true
+            } catch {
+                return @{
+                    Status  = 'Error'
+                    Message = "The domain '$Domain' is already in use."
+                }
+            }
+            return @{
+                Status  = 'Success'
+                Message = "The domain '$Domain' is available."
+            }
+        }
+        'AddTenant' {
+            # Fetch the organization id for Tier 2 CSPs
+            if ($Request.Body.ResellerType -eq 'Tier2') {
+                $OrganizationProfileUri = 'https://api.partnercenter.microsoft.com/v1/profiles/organization'
+                try {
+                    $OrgResponse = New-GraphPOSTRequest -type GET -uri $OrganizationProfileUri -scope 'https://api.partnercenter.microsoft.com/.default' -NoAuthCheck $true
+                    $Request.Body.AssociatedPartnerId = $OrgResponse.id
+                } catch {
+                    $Body = @{
+                        state      = 'Error'
+                        resultText = "Failed to retrieve organization profile: $($_.Exception.Message)"
+                    }
+                    break
+                }
+            }
+
+            $Payload = @{
+                enableGDAPByDefault   = $false
+                Id                    = $null
+                CommerceId            = $null
+                CompanyProfile        = @{
+                    TenantId    = $null
+                    Domain      = '{0}.onmicrosoft.com' -f $Request.Body.TenantName
+                    CompanyName = $Request.Body.CompanyName
+                    Attributes  = @{ ObjectType = 'CustomerCompanyProfile' }
+                }
+                BillingProfile        = @{
+                    Id             = $null
+                    FirstName      = $Request.Body.FirstName
+                    LastName       = $Request.Body.LastName
+                    Email          = $Request.Body.Email
+                    Culture        = 'EN-US'
+                    Language       = 'En'
+                    CompanyName    = $Request.Body.CompanyName
+                    DefaultAddress = @{
+                        Country      = $Request.Body.Country
+                        Region       = $null
+                        City         = $Request.Body.City
+                        State        = $Request.Body.State
+                        AddressLine1 = $Request.Body.AddressLine1
+                        AddressLine2 = $Request.Body.AddressLine2
+                        PostalCode   = $Request.Body.PostalCode
+                        FirstName    = $Request.Body.FirstName
+                        LastName     = $Request.Body.LastName
+                        PhoneNumber  = $Request.Body.PhoneNumber
+                    }
+                    Attributes     = @{ ObjectType = 'CustomerBillingProfile' }
+                }
+                RelationshipToPartner = 'none'
+                AllowDelegatedAccess  = $null
+                UserCredentials       = $null
+                CustomDomains         = $null
+                Attributes            = @{ ObjectType = 'Customer' }
+            }
+
+            if ($Request.Body.ResellerType -eq 'Tier2' -and $Request.Body.AssociatedPartnerId) {
+                $Payload.AssociatedPartnerId = $Request.Body.AssociatedPartnerId
+            }
+
+            $CustomerCreationUri = 'https://api.partnercenter.microsoft.com/v1/customers'
+            try {
+                $Response = New-GraphPOSTRequest -type POST -uri $CustomerCreationUri -scope 'https://api.partnercenter.microsoft.com/.default' -Body ($Payload | ConvertTo-Json -Depth 10) -NoAuthCheck $true
+
+                $Body = @{
+                    state      = 'Success'
+                    resultText = "Tenant created successfully. 'Username is $($Response.userCredentials.userName)@{0}.onmicrosoft.com'. Click copy to retrieve the password." -f $Request.Body.TenantName
+                    copyField  = $Response.userCredentials.password
+                }
+            } catch {
+                $Body = @{
+                    state      = 'Error'
+                    resultText = "Failed to create tenant: $($_.Exception.Message)"
+                }
+            }
+        }
+        'ValidateAddress' {
+            $AddressPayload = @{
+                AddressLine1 = $Request.Body.AddressLine1
+                AddressLine2 = $Request.Body.AddressLine2
+                City         = $Request.Body.City
+                State        = $Request.Body.State
+                PostalCode   = $Request.Body.PostalCode
+                Country      = $Request.Body.Country
+            }
+
+            $AddressValidationUri = 'https://api.partnercenter.microsoft.com/v1/validations/address'
+            try {
+                $Response = New-GraphPOSTRequest -type POST -uri $AddressValidationUri -scope 'https://api.partnercenter.microsoft.com/.default' -Body ($AddressPayload | ConvertTo-Json -Depth 10) -NoAuthCheck $true
+
+                return @{
+                    Status             = 'Success'
+                    OriginalAddress    = $Response.originalAddress
+                    SuggestedAddresses = $Response.suggestedAddresses
+                    ValidationStatus   = $Response.status
+                }
+            } catch {
+                return @{
+                    state  = 'Error'
+                    resultText = "Address validation failed: $($_.Exception.Message)"
+                }
+            }
+        }
+        default {
+            return @{
+                state  = 'Error'
+                resultText = "Invalid action specified: $($Request.Body.Action)"
+            }
+        }
+    }
+
+    Push-OutputBinding -Name Response -Value ([HttpResponseContext]@{
+        StatusCode = [HttpStatusCode]::InternalServerError
+        Body       = $Body
+    })
+}