Windows Autopatch for everyone

function Install-ModuleIfNotPresent {
    param (
        [string]$ModuleName
    )

    $module = Get-Module -ListAvailable -Name $ModuleName

    if ($null -eq $module) {
        try {
            Install-Module -Name $ModuleName -AllowClobber -Scope CurrentUser -Force -Confirm:$false
            Write-Output "$ModuleName module installed successfully."
        }
        catch {
            Write-Error "Failed to install $ModuleName module. Please run PowerShell as Administrator."
            exit
        }
    }
    else {
        Write-Output "$ModuleName module is already installed."
    }
}

function Create-Group {
    param (
        [hashtable]$Params
    )

    New-MgBetaGroup -BodyParameter $Params
    Write-Output "Group $($Params.displayName) successfully created!"
}

function Add-GroupToGroup {
    param (
        [string]$dynamicGroupName,
        [string]$staticGroupName
    )

    # Get Object IDs for the Dynamic Group and Static Group
    $dynamicGroupId = (Get-MgBetaGroup -Filter "displayName eq '$dynamicGroupName'").Id
    $staticGroupId = (Get-MgBetaGroup -Filter "displayName eq '$staticGroupName'").Id

    # Prepare the member body
    $memberBody = @{
        "@odata.id" = "https://graph.microsoft.com/beta/directoryObjects/$dynamicGroupId"
    }

    # Add the Dynamic Group to the Static Group
    New-MgBetaGroupMemberByRef -GroupId $staticGroupId -BodyParameter $memberBody
    Write-Output "Added $dynamicGroupName to $staticGroupName"
}

# Main script
$moduleName = "Microsoft.Graph.Beta.Groups"
Install-ModuleIfNotPresent -ModuleName $moduleName

Import-Module $moduleName
Disconnect-MgGraph
Connect-MgGraph -Scopes "Group.ReadWrite.All"

# list of groups to create
$groupsToCreate = @(
    @{
        description                   = "Dynamic RTC-Patch Group with all Windows Autopilot Devices"
        displayName                   = "RTC-Patch-AllAutopilotDevices"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-AllAutopilotDevices"
        securityEnabled               = $true
        membershipRule                = '(device.devicePhysicalIDs -any (_ -startsWith "[ZTDid]"))'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring Test"
        displayName                   = "RTC-Patch-Ring-Test"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-Test"
        securityEnabled               = $true
        membershipRule                = '(device.devicePhysicalIds -any (_ -eq "[OrderID]:Patch-Test"))'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring 1"
        displayName                   = "RTC-Patch-Ring-1"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-1"
        securityEnabled               = $true
        membershipRule                = '(device.devicePhysicalIds -any (_ -eq "[OrderID]:Patch-1"))'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring 2"
        displayName                   = "RTC-Patch-Ring-2"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-2"
        securityEnabled               = $true
        membershipRule                = '(device.devicePhysicalIds -any (_ -eq "[OrderID]:Patch-2"))'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring 3"
        displayName                   = "RTC-Patch-Ring-3"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-3"
        securityEnabled               = $true
        membershipRule                = '(device.devicePhysicalIds -any (_ -eq "[OrderID]:Patch-3"))'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring Last"
        displayName                   = "RTC-Patch-Ring-Last"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-Last"
        securityEnabled               = $true
        membershipRule                = '(device.devicePhysicalIds -any (_ -eq "[OrderID]:Patch-Last"))'
        membershipRuleProcessingState = "on"
    },
    @{
        description     = "Static Group for Edge and Microsoft365 Updates"
        displayName     = "RTC-Patch-Policy-Test"
        groupTypes      = @()
        mailEnabled     = $false
        mailNickname    = "RTC-PatchPolicy-Test"
        securityEnabled = $true
    },
    @{
        description     = "Static Group for Edge and Microsoft365 Updates"
        displayName     = "RTC-Patch-Policy-Fast"
        groupTypes      = @()
        mailEnabled     = $false
        mailNickname    = "RTC-PatchPolicy-Fast"
        securityEnabled = $true
    },
    @{
        description     = "Static Group for Edge and Microsoft365 Updates"
        displayName     = "RTC-Patch-Policy-Broad"
        groupTypes      = @()
        mailEnabled     = $false
        mailNickname    = "RTC-PatchPolicy-Broad"
        securityEnabled = $true
    }
)

foreach ($groupParams in $groupsToCreate) {
    Create-Group -Params $groupParams
}


#Group assignment dynamic into static-group

# Group RTC-Patch-Ring-Test into Group RTC-PatchPolicy-Test
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-Test" -staticGroupName "RTC-Patch-Policy-Test"

# Group RTC-Patch-Ring-1 into Group RTC-PatchPolicy-Fast
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-1" -staticGroupName "RTC-Patch-Policy-Fast"

# Group RTC-Patch-Ring-2 into Group RTC-PatchPolicy-Fast
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-2" -staticGroupName "RTC-Patch-Policy-Fast"

# Group RTC-Patch-Ring-3 into Group RTC-PatchPolicy-Broad
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-3" -staticGroupName "RTC-Patch-Policy-Broad"

# Group RTC-Patch-Ring-Last into Group RTC-PatchPolicy-Broad
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-Last" -staticGroupName "RTC-Patch-Policy-Broad"

function Install-ModuleIfNotPresent {
    param (
        [string]$ModuleName
    )

    $module = Get-Module -ListAvailable -Name $ModuleName

    if ($null -eq $module) {
        try {
            Install-Module -Name $ModuleName -AllowClobber -Scope CurrentUser -Force -Confirm:$false
            Write-Output "$ModuleName module installed successfully."
        }
        catch {
            Write-Error "Failed to install $ModuleName module. Please run PowerShell as Administrator."
            exit
        }
    }
    else {
        Write-Output "$ModuleName module is already installed."
    }
}

function Create-Group {
    param (
        [hashtable]$Params
    )

    New-MgBetaGroup -BodyParameter $Params
    Write-Output "Group $($Params.displayName) successfully created!"
}

function Add-GroupToGroup {
    param (
        [string]$dynamicGroupName,
        [string]$staticGroupName
    )

    # Get Object IDs for the Dynamic Group and Static Group
    $dynamicGroupId = (Get-MgBetaGroup -Filter "displayName eq '$dynamicGroupName'").Id
    $staticGroupId = (Get-MgBetaGroup -Filter "displayName eq '$staticGroupName'").Id

    # Prepare the member body
    $memberBody = @{
        "@odata.id" = "https://graph.microsoft.com/beta/directoryObjects/$dynamicGroupId"
    }

    # Add the Dynamic Group to the Static Group
    New-MgBetaGroupMemberByRef -GroupId $staticGroupId -BodyParameter $memberBody
    Write-Output "Added $dynamicGroupName to $staticGroupName"
}

# Main script
$moduleName = "Microsoft.Graph.Beta.Groups"
Install-ModuleIfNotPresent -ModuleName $moduleName

Import-Module $moduleName
Disconnect-MgGraph
Connect-MgGraph -Scopes "Group.ReadWrite.All"

# list of groups to create
$groupsToCreate = @(
    @{
        description                   = "Dynamic RTC-Patch Group with all Windows Autopilot Devices"
        displayName                   = "RTC-Patch-AllAutopilotDevices"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-AllAutopilotDevices"
        securityEnabled               = $true
        membershipRule                = '(device.devicePhysicalIDs -any (_ -startsWith "[ZTDid]"))'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring Test"
        displayName                   = "RTC-Patch-Ring-Test"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-Test"
        securityEnabled               = $true
        membershipRule                = '(device.extensionAttribute5 -eq "Patch-Test")'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring 1"
        displayName                   = "RTC-Patch-Ring-1"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-1"
        securityEnabled               = $true
        membershipRule                = '(device.extensionAttribute5 -eq "Patch-1")'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring 2"
        displayName                   = "RTC-Patch-Ring-2"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-2"
        securityEnabled               = $true
        membershipRule                = '(device.extensionAttribute5 -eq "Patch-2")'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring 3"
        displayName                   = "RTC-Patch-Ring-3"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-3"
        securityEnabled               = $true
        membershipRule                = '(device.extensionAttribute5 -eq "Patch-3")'
        membershipRuleProcessingState = "on"
    },
    @{
        description                   = "Dynamic RTC-Patch Group with devices assigned to Ring Last"
        displayName                   = "RTC-Patch-Ring-Last"
        groupTypes                    = @("DynamicMembership")
        mailEnabled                   = $false
        mailNickname                  = "RTC-Patch-Ring-Last"
        securityEnabled               = $true
        membershipRule                = '(device.extensionAttribute5 -eq "Patch-Last")'
        membershipRuleProcessingState = "on"
    },
    @{
        description     = "Static Group for Edge and Microsoft365 Updates"
        displayName     = "RTC-Patch-Policy-Test"
        groupTypes      = @()
        mailEnabled     = $false
        mailNickname    = "RTC-PatchPolicy-Test"
        securityEnabled = $true
    },
    @{
        description     = "Static Group for Edge and Microsoft365 Updates"
        displayName     = "RTC-Patch-Policy-Fast"
        groupTypes      = @()
        mailEnabled     = $false
        mailNickname    = "RTC-PatchPolicy-Fast"
        securityEnabled = $true
    },
    @{
        description     = "Static Group for Edge and Microsoft365 Updates"
        displayName     = "RTC-Patch-Policy-Broad"
        groupTypes      = @()
        mailEnabled     = $false
        mailNickname    = "RTC-PatchPolicy-Broad"
        securityEnabled = $true
    }
)

foreach ($groupParams in $groupsToCreate) {
    Create-Group -Params $groupParams
}


#Group assignment dynamic into static-group

# Group RTC-Patch-Ring-Test into Group RTC-PatchPolicy-Test
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-Test" -staticGroupName "RTC-Patch-Policy-Test"

# Group RTC-Patch-Ring-1 into Group RTC-PatchPolicy-Fast
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-1" -staticGroupName "RTC-Patch-Policy-Fast"

# Group RTC-Patch-Ring-2 into Group RTC-PatchPolicy-Fast
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-2" -staticGroupName "RTC-Patch-Policy-Fast"

# Group RTC-Patch-Ring-3 into Group RTC-PatchPolicy-Broad
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-3" -staticGroupName "RTC-Patch-Policy-Broad"

# Group RTC-Patch-Ring-Last into Group RTC-PatchPolicy-Broad
Add-GroupToGroup -dynamicGroupName "RTC-Patch-Ring-Last" -staticGroupName "RTC-Patch-Policy-Broad"

function Install-ModuleIfNotPresent {
    param (
        [string]$ModuleName
    )

    $module = Get-Module -ListAvailable -Name $ModuleName

    if ($null -eq $module) {
        try {
            Install-Module -Name $ModuleName -AllowClobber -Scope CurrentUser -Force -Confirm:$false
            Write-Output "$ModuleName module installed successfully."
        }
        catch {
            Write-Error "Failed to install $ModuleName module. Please run PowerShell as Administrator."
            exit
        }
    }
    else {
        Write-Output "$ModuleName module is already installed."
    }
}

function RTC-Patch-ChangeAssignment {
    # Get all autopilot devices (even if more than 1000)
    $autopilotDevices = Invoke-MSGraphRequest -HttpMethod GET -Url "deviceManagement/windowsAutopilotDeviceIdentities" | Get-MSGraphAllPages

    # Ask user to select a group tag to assign
    $groupTags = @("Patch-Test", "Patch-1", "Patch-2", "Patch-3", "Patch-Last")
    $selectedGroupTag = $groupTags | Out-GridView -OutputMode Single -Title "Select the group tag you want to assign"

    # Display gridview to show devices
    $selectedAutopilotDevices = $autopilotDevices | Out-GridView -OutputMode Multiple -Title "Select Windows Autopilot entities to update"

    $selectedAutopilotDevices | ForEach-Object {

        $autopilotDevice = $PSItem


        $autopilotDevice.groupTag = $selectedGroupTag


        $requestBody =
        @"
    {
        groupTag: `"$($autopilotDevice.groupTag)`",
    }
"@
        Write-Output "Updating entity: $($autopilotDevice.id) | groupTag: $($autopilotDevice.groupTag) | orderIdentifier: $($autopilotDevice.orderIdentifier)"
        Invoke-MSGraphRequest -HttpMethod POST -Content $requestBody -Url "deviceManagement/windowsAutopilotDeviceIdentities/$($autopilotDevice.id)/UpdateDeviceProperties" 
    }

    # Invoke an autopilot service sync
    Invoke-MSGraphRequest -HttpMethod POST -Url "deviceManagement/windowsAutopilotSettings/sync"
    
}

#Main Script
$moduleName = "Microsoft.Graph"
Install-ModuleIfNotPresent -ModuleName $moduleName

Disconnect-MgGraph
Connect-MSGraph
Update-MSGraphEnvironment -SchemaVersion "Beta" -Quiet
Connect-MSGraph -Quiet

RTC-Patch-ChangeAssignment

function Install-ModuleIfNotPresent {
    param (
        [string]$ModuleName
    )

    $module = Get-Module -ListAvailable -Name $ModuleName

    if ($null -eq $module) {
        try {
            Install-Module -Name $ModuleName -AllowClobber -Scope CurrentUser -Force -Confirm:$false
            Write-Output "$ModuleName module installed successfully."
        }
        catch {
            Write-Error "Failed to install $ModuleName module. Please run PowerShell as Administrator."
            exit
        }
    }
    else {
        Write-Output "$ModuleName module is already installed."
    }
}

function RTC-Patch-ChangeAssignment {
    Connect-MgGraph -Scopes "Device.ReadWrite.All"

    # Retrieve all devices
    [array]$Devices = Get-MgDevice -All

    # Define group tags for selection
    $EAvalues = @("Patch-Test", "Patch-1", "Patch-2", "Patch-3", "Patch-Last")

    # Ask user to select a group tag to assign
    $selectedEAvalue = $EAvalues | Out-GridView -OutputMode Single -Title "Select the value you want to assign to Entra ID extension attribute"

    # Allow user to select one or more devices from a list to update
    $selectedDevices = $Devices | Out-GridView -OutputMode Multiple -Title "Select devices to update Entra ID extension attribute"

    foreach ($Device in $selectedDevices) {
        # Prepare the JSON payload for updating the device
        $Attributes = @{
            "extensionAttributes" = @{
                "extensionAttribute5" = $selectedEAvalue
            }
        } | ConvertTo-Json

        # Update the device with the new group tag
        Update-MgDevice -DeviceId $Device.Id -BodyParameter $Attributes

        Write-Host ("Device {0} has been updated with Entra ID extension attribute {1}" -f $Device.DisplayName, $selectedEAvalue)
    }
}

# Main Script
$moduleName = "Microsoft.Graph"
Install-ModuleIfNotPresent -ModuleName $moduleName
Disconnect-MgGraph
RTC-Patch-ChangeAssignment

function Install-ModuleIfNotPresent {
    param (
        [string]$ModuleName
    )

    $module = Get-Module -ListAvailable -Name $ModuleName

    if ($null -eq $module) {
        try {
            Install-Module -Name $ModuleName -AllowClobber -Scope CurrentUser -Force -Confirm:$false
            Write-Output "$ModuleName module installed successfully."
        }
        catch {
            Write-Error "Failed to install $ModuleName module. Please run PowerShell as Administrator."
            exit
        }
    }
    else {
        Write-Output "$ModuleName module is already installed."
    }
}

function RTC-Patch-ShowDevices {
    # Get all Autopilot Devices
    $autopilotDevices = Invoke-MSGraphRequest -HttpMethod GET -Url "deviceManagement/windowsAutopilotDeviceIdentities" | Get-MSGraphAllPages

    # Filter devices where groupTag starts with "Patch"
    $filteredAutopilotDevices = $autopilotDevices | Where-Object { $_.groupTag -like "Patch*" }

    # Group the filtered devices by groupTag
    $groupedAutopilotDevices = $filteredAutopilotDevices | Group-Object -Property groupTag

    # Display each group and its devices
    foreach ($group in $groupedAutopilotDevices) {
        Write-Host "Group Tag: $($group.Name)" -ForegroundColor Green
        $group.Group | Out-GridView -Title "Devices with Group Tag: $($group.Name)"
    }

}

function RTC-Patch-ChangeAssignment {
    # Get all autopilot devices (even if more than 1000)
    $autopilotDevices = Invoke-MSGraphRequest -HttpMethod GET -Url "deviceManagement/windowsAutopilotDeviceIdentities" | Get-MSGraphAllPages

    # Ask user to select a group tag to assign
    $groupTags = @("Patch-Test", "Patch-1", "Patch-2", "Patch-3", "Patch-Last")
    $selectedGroupTag = $groupTags | Out-GridView -OutputMode Single -Title "Select the group tag you want to assign"

    # Display gridview to show devices
    $selectedAutopilotDevices = $autopilotDevices | Out-GridView -OutputMode Multiple -Title "Select Windows Autopilot entities to update"

    $selectedAutopilotDevices | ForEach-Object {

        $autopilotDevice = $PSItem


        $autopilotDevice.groupTag = $selectedGroupTag


        $requestBody =
        @"
    {
        groupTag: `"$($autopilotDevice.groupTag)`",
    }
"@
        Write-Output "Updating entity: $($autopilotDevice.id) | groupTag: $($autopilotDevice.groupTag) | orderIdentifier: $($autopilotDevice.orderIdentifier)"
        Invoke-MSGraphRequest -HttpMethod POST -Content $requestBody -Url "deviceManagement/windowsAutopilotDeviceIdentities/$($autopilotDevice.id)/UpdateDeviceProperties" 
    }

    # Invoke an autopilot service sync
    Invoke-MSGraphRequest -HttpMethod POST -Url "deviceManagement/windowsAutopilotSettings/sync"
}

# Function to display the menu and handle user input
function RTC-Patch-Display-Menu {
    $menu = @(
        "Show RTC-Patch devices & Assignments",
        "Change Assignments of RTC-Patch devices"
    )

    # Present the menu options to the user using Out-GridView
    $selectedOption = $menu | Out-GridView -Title "RTC-Patch Management Console" -OutputMode Single

    # Handle the user's choice
    switch ($selectedOption) {
        $menu[0] { RTC-Patch-ShowDevices }
        $menu[1] { RTC-Patch-ChangeAssignment }
        default { Write-Host "No valid option selected." }
    }
}

#Main Script
$moduleName = "Microsoft.Graph"
Install-ModuleIfNotPresent -ModuleName $moduleName

Disconnect-MgGraph
Connect-MSGraph
Update-MSGraphEnvironment -SchemaVersion "Beta" -Quiet
Connect-MSGraph -Quiet

# Call the display menu function
RTC-Patch-Display-Menu

function Install-ModuleIfNotPresent {
    param (
        [string]$ModuleName
    )

    $module = Get-Module -ListAvailable -Name $ModuleName

    if ($null -eq $module) {
        try {
            Install-Module -Name $ModuleName -AllowClobber -Scope CurrentUser -Force -Confirm:$false
            Write-Output "$ModuleName module installed successfully."
        }
        catch {
            Write-Error "Failed to install $ModuleName module. Please run PowerShell as Administrator."
            exit
        }
    }
    else {
        Write-Output "$ModuleName module is already installed."
    }
}

function RTC-Patch-ShowDevices {
    $groupNames = @(
        "RTC-Patch-Ring-Test",
        "RTC-Patch-Ring-1",
        "RTC-Patch-Ring-2",
        "RTC-Patch-Ring-3",
        "RTC-Patch-Ring-Last"
    )
    
    Connect-MgGraph -Scopes "Group.Read.All", "Device.Read.All"

    foreach ($GroupName in $GroupNames) {
        try {
            # Get the group by name (assuming group display names are unique)
            $group = Get-MgGroup -Filter "displayName eq '$GroupName'"
            if ($group) {
                # Get members of the group
                $memberIds = Get-MgGroupMember -GroupId $group.Id -All | Select-Object Id

                $devices = @()
                foreach ($memberId in $memberIds) {
                    # Attempt to retrieve the device by the member ID
                    $device = Get-MgDevice -DeviceId $memberId.Id -ErrorAction SilentlyContinue
                    if ($device) {
                        $devices += $device
                    }
                }

                if ($devices.Count -gt 0) {
                    # Display devices in Out-GridView
                    $devices | Select-Object DisplayName, Id | Out-GridView -Title "Devices in $GroupName"
                }
                else {
                    Write-Host "No devices found in the group $GroupName" -ForegroundColor Yellow
                }
            }
            else {
                Write-Host "Group $GroupName not found" -ForegroundColor Red
            }
        }
        catch {
            Write-Host "An error occurred: $_" -ForegroundColor Red
        }
    }
}

function RTC-Patch-ChangeAssignment {
    Connect-MgGraph -Scopes "Device.ReadWrite.All"

    # Retrieve all devices
    [array]$Devices = Get-MgDevice -All

    # Define group tags for selection
    $EAvalues = @("Patch-Test", "Patch-1", "Patch-2", "Patch-3", "Patch-Last")

    # Ask user to select a value to assign
    $selectedEAvalue = $EAvalues | Out-GridView -OutputMode Single -Title "Select the value you want to assign to Entra ID extension attribute"

    # Allow user to select one or more devices from a list to update
    $selectedDevices = $Devices | Out-GridView -OutputMode Multiple -Title "Select devices to update Entra ID extension attribute"

    foreach ($Device in $selectedDevices) {
        # Prepare the JSON payload for updating the device
        $Attributes = @{
            "extensionAttributes" = @{
                "extensionAttribute5" = $selectedEAvalue
            }
        } | ConvertTo-Json

        # Update the device with the new value
        Update-MgDevice -DeviceId $Device.Id -BodyParameter $Attributes

        Write-Host ("Device {0} has been updated with Entra ID extension attribute {1}" -f $Device.DisplayName, $selectedEAvalue)
    }
}

function RTC-Patch-Display-Menu {
    $menu = @(
        "Show RTC-Patch devices & Assignments",
        "Change Assignments of RTC-Patch devices"
    )

    $selectedOption = $menu | Out-GridView -Title "RTC-Patch Management Console" -OutputMode Single

    # Handle the user's choice
    switch ($selectedOption) {
        $menu[0] { RTC-Patch-ShowDevices }
        $menu[1] { RTC-Patch-ChangeAssignment }
        default { Write-Host "No valid option selected." }
    }
}


#Main Script
$moduleName = "Microsoft.Graph"
Install-ModuleIfNotPresent -ModuleName $moduleName

# Call the display menu function
RTC-Patch-Display-Menu