TenantAtlas/specs/030-intune-rbac-backup/tasks.md
ahmido 602195324b spec/024-additional-intune-types (#28)
specs for additional intune types

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@adsmac.local>
Reviewed-on: #28
2026-01-04 02:27:44 +00:00

1.2 KiB

Tasks: Intune RBAC Backup (Role Definitions + Assignments) (030)

Branch: feat/030-intune-rbac-backup
Date: 2026-01-04
Input: spec.md, plan.md

Phase 1: Setup

  • T001 Create spec/plan/tasks and checklist.

Phase 2: Research & Design

  • T002 Confirm Graph endpoints, permissions, and payload shape for role definitions/assignments.
  • T003 Decide whether RBAC objects are policy types or foundation types.
  • T004 Define preview dependency report rules and what blocks execution.

Phase 3: Tests (TDD)

  • T005 Add sync test importing RBAC objects (if modeled as policy types).
  • T006 Add backup snapshot test for role definitions/assignments.
  • T007 Add restore preview test that reports missing dependencies and blocks execution.

Phase 4: Implementation

  • T008 Add RBAC types to config/tenantpilot.php (restore mode preview-only).
  • T009 Add graph contracts in config/graph_contracts.php.
  • T010 Implement snapshot capture and safe normalized display.
  • T011 Implement restore preview dependency report.

Phase 5: Verification

  • T012 Run targeted tests.
  • T013 Run Pint (./vendor/bin/pint --dirty).