# ----------------------------------------------------------------


# 01. モジュールと認証


# ----------------------------------------------------------------

$RequiredModules = @("Microsoft.Graph.Users", "Microsoft.Graph.Identity.DirectoryManagement")
foreach ($Module in $RequiredModules) {
    if (-not (Get-Module -Name $Module -ListAvailable)) {
        Write-Warning "Required module '$Module' not found. Installing..."
        Install-Module -Name $Module -Scope CurrentUser -Force
    }
}
Import-Module Microsoft.Graph.Users, Microsoft.Graph.Identity.DirectoryManagement

# M365接続（必要なスコープを指定）

$Scopes = @("User.ReadWrite.All", "Directory.AccessAsUser.All")
try {
    Write-Host "Connecting to MS Graph with required scopes..." -ForegroundColor Cyan
    Connect-MgGraph -Scopes $Scopes
} catch {
    Write-Error "Failed to connect to MS Graph. Check permissions and network connectivity."
    exit 1
}

# ----------------------------------------------------------------


# 02. 設定定義


# ----------------------------------------------------------------


# 操作対象のライセンスSKU ID (例: E3)


# SKU IDはテナント固有であり、事前に Get-MgSubscribedSku で確認が必要です。

$TargetSkuId = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" # 仮のGUID
$LogFilePath = "$PSScriptRoot\LicenseOperation_$(Get-Date -Format yyyyMMdd_HHmmss).log"

# CSV入力ファイルのフォーマット例:


# UserPrincipalName,Action,RemovePlans (Actionは 'Assign' または 'Remove')


# user.a@contoso.com,Assign,


# user.b@contoso.com,Remove,

$InputCsvPath = "$PSScriptRoot\TargetUsers.csv"

# ----------------------------------------------------------------


# 03. コア関数：ライセンスプロビジョニングの実行


# ----------------------------------------------------------------

function Invoke-MgLicenseProvisioning {
    param(
        [Parameter(Mandatory=$true)]
        [string]$Path,

        [Parameter(Mandatory=$true)]
        [string]$SkuId
    )

    Write-Host "Processing users from $Path (SKU ID: $SkuId)..." -ForegroundColor Yellow

    # 並列処理の準備

    $Users = Import-Csv -Path $Path

    # Parallel処理の実行 (ThrottleLimit: 環境とGraph API制限に応じて調整)

    $Results = $Users | ForEach-Object -Parallel {
        param($User, $SkuId, $LogFilePath) # スクリプトブロック変数

        $upn = $User.UserPrincipalName
        $action = $User.Action
        $removePlans = $User.RemovePlans
        $threadId = [System.Threading.Thread]::CurrentThread.ManagedThreadId

        $ResultObject = [PSCustomObject]@{
            ThreadID = $threadId
            UserPrincipalName = $upn
            Action = $action
            Status = "Pending"
            Message = ""
        }

        try {

            # ユーザーのObjectIDを取得 (Graph SDKではUPNまたはIDが必要)

            $mgUser = Get-MgUser -UserId $upn -Select Id, UserPrincipalName -ErrorAction Stop
            $userId = $mgUser.Id

            # ------------------------------------------------------


            # ライセンス操作オブジェクトの構築


            # ------------------------------------------------------

            $LicenseChanges = @()
            if ($action -ceq "Assign") {

                # ライセンス割り当て

                $LicenseChanges = @{
                    AddLicenses = @(
                        @{ SkuId = $SkuId; DisabledPlans = @() }
                    )
                    RemoveLicenses = @()
                }
            } elseif ($action -ceq "Remove") {

                # ライセンス解除

                $LicenseChanges = @{
                    AddLicenses = @()
                    RemoveLicenses = @($SkuId)
                }
            } else {
                 throw "Invalid action specified: $($action). Must be 'Assign' or 'Remove'."
            }

            # Set-MgUserLicenseの実行

            Set-MgUserLicense -UserId $userId -Body $LicenseChanges -ErrorAction Stop

            $ResultObject.Status = "Success"
            $ResultObject.Message = "License operation '$action' completed successfully."

        } catch {
            $errorMessage = $_.Exception.Message -replace "`n", " "
            $ResultObject.Status = "Error"
            $ResultObject.Message = "Failed operation '$action': $errorMessage"
        }

        # 結果をロギングし、メインスレッドに戻す

        $logEntry = "$(Get-Date -Format 'HH:mm:ss') [T:$threadId] $($ResultObject.Status) - $($ResultObject.UserPrincipalName): $($ResultObject.Message)"
        Add-Content -Path $LogFilePath -Value $logEntry

        return $ResultObject

    } -ThrottleLimit 50 -LogFile $LogFilePath -ArgumentList $SkuId, $LogFilePath

    # 処理結果のサマリー

    $SuccessCount = ($Results | Where-Object { $_.Status -eq "Success" }).Count
    $ErrorCount = ($Results | Where-Object { $_.Status -eq "Error" }).Count

    Write-Output "`n--- Operation Summary ---"
    Write-Output "Total Processed: $($Users.Count)"
    Write-Output "Success Count: $SuccessCount"
    Write-Output "Error Count: $ErrorCount"
    Write-Output "Full log path: $LogFilePath"
}

# ----------------------------------------------------------------


# 04. 実行部


# ----------------------------------------------------------------

# 事前に $InputCsvPath を作成し、実行する


# Invoke-MgLicenseProvisioning -Path $InputCsvPath -SkuId $TargetSkuId

Disconnect-MgGraph

# 100ユーザーを対象とした場合の計測例

Measure-Command {

    # 実際にはテスト用のCSVを用意し、上記の Invoke-MgLicenseProvisioning を実行


    # Invoke-MgLicenseProvisioning -Path '.\Test100Users.csv' -SkuId $TargetSkuId

}

# TotalSeconds : 5.8123 (並列処理の場合)