Tenants: Tenant anlegen/öffnen → tenant_id, app_client_id, app_client_secret setzen → Make current (wichtig). Inventory → Policies: oben Sync from Intune. In der Tabelle nach Type = “Driver Updates (Windows)” (windowsDriverUpdateProfile) filtern und Policy öffnen. Auf der Policy: Settings-Tab prüfen (Block „Driver Update Profile“), dann Capture snapshot klicken und unter Versions die Version ansehen. Restore-Test (nur im Test-Tenant!): Version öffnen → Restore to Intune erst als Dry-run, dann Execute; danach unter Backups & Restore → Restore Runs Ergebnis prüfen (soll graph_path mit deviceManagement/windowsDriverUpdateProfiles/... zeigen). Co-authored-by: Ahmed Darrazi <ahmeddarrazi@adsmac.local> Reviewed-on: #27
1.6 KiB
1.6 KiB
Tasks: Driver Updates (WUfB Add-on) (018)
Branch: feat/018-driver-updates-wufb
Date: 2026-01-03
Input: spec.md, plan.md
Phase 1: Setup
- T001 Create/confirm spec, plan, tasks, checklist.
Phase 2: Research & Design
- T002 Verify Graph resource +
@odata.typefor driver update profiles. - T003 Verify PATCHable fields and define
update_strip_keys/update_whitelist. - T004 Verify assignment endpoints (
/assignments,/assign) for this resource. - T005 Decide restore mode (
enabledvspreview-only) based on risk + patchability.
Phase 3: Tests (TDD)
- T006 Add sync test ensuring
windowsDriverUpdateProfilepolicies are imported and typed correctly. - T007 Add snapshot/version capture test asserting full payload is stored.
- T008 Add restore preview test for this type (entries + restore_mode shown).
- T009 Add restore execution test asserting only patchable properties are sent and failures are reported with Graph metadata.
- T010 Add normalized display test for key fields.
Phase 4: Implementation
- T011 Add
windowsDriverUpdateProfiletoconfig/tenantpilot.php. - T012 Add Graph contract entry in
config/graph_contracts.php. - T013 Implement any required snapshot hydration (if Graph uses subresources).
- T014 Implement restore apply support in
RestoreService(contract-driven sanitization). - T015 Add a
WindowsDriverUpdateProfileNormalizerand register it.
Phase 5: Verification
- T016 Run targeted tests.
- T017 Run Pint (
./vendor/bin/pint --dirty).