Objects set to -BodyParameter and -AdditionalProperties should be fully serialized to JSON

[peombwa]

Current behavior

ipRanges are not serialized to JSON when making a request.

# Request made.
$Body = @{
    "@odata.type" = "#microsoft.graph.ipNamedLocation"
    displayName = "Untrusted IP named location"
    isTrusted = $false
    ipRanges = @(
        @{ cidrAddress = "12.34.221.11/22" }
        @{ cidrAddress = "2001:0:9d38:90d6:0:0:0:0/63" })
}
New-MgIdentityConditionalAccessNamedLocation -BodyParameter $Body -Debug

# Debug log - ipRanges is not serialized to JSON.
DEBUG: POST /v1.0/identity/conditionalAccess/namedLocations HTTP/1.1
HTTP: graph.microsoft.com
Content-Type: application/json
{
  "ipRanges": [
    [ "System.Collections.DictionaryEntry" ],
    [ "System.Collections.DictionaryEntry" ]
  ],
  "isTrusted": false,
  "@odata.type": "#microsoft.graph.ipNamedLocation",
  "displayName": "Untrusted IP named location"
}

Expected behavior

Objects set to -BodyParameter or -AdditionalProperties should be fully serialized to JSON Irregardless of the depth.

$Body = @{
    "@odata.type" = "#microsoft.graph.ipNamedLocation"
    displayName = "Untrusted IP named location"
    isTrusted = $false
    ipRanges = @(
        @{ cidrAddress = "12.34.221.11/22" }
        @{ cidrAddress = "2001:0:9d38:90d6:0:0:0:0/63" })
}
New-MgIdentityConditionalAccessNamedLocation -BodyParameter $Body -Debug

# Debug log
DEBUG: POST /v1.0/identity/conditionalAccess/namedLocations HTTP/1.1
HTTP: graph.microsoft.com
Content-Type: application/json
{
  "ipRanges": [
    { "cidrAddress": "12.34.221.11/22" },
    { "cidrAddress": "2001:0:9d38:90d6:0:0:0:0/63" }
  ],
  "isTrusted": false,
  "@odata.type": "#microsoft.graph.ipNamedLocation",
  "displayName": "Untrusted IP named location"
}

AB#10414

[mvromer]

Deleted my previous comment about similar errors in using New-MgApplication with the -Api parameter because my original code had some typos in the hash table provided to that parameter. Sorry for any noise on y'all's end.

[KenBenjamin]

Is there a workaround for this, such as pre-serializing the ipRanges values into strings? This is a blocker for some security work I'm doing.

[KenBenjamin]

I found a viable workaround:

Invoke-MgGraphRequest -Method POST -Uri "https://graph.microsoft.com/1.0/identity/conditionalAccess/namedLocations" -Body ($Body | ConvertTo-Json) 

[peombwa]

Also applies to https://docs.microsoft.com/en-us/graph/api/ediscovery-noncustodialdatasource-post?view=graph-rest-beta&tabs=http#example-2-add-a-non-custodial-data-source-site-with-a-url