# Requires -Modules @{ModuleName='Microsoft.Graph.Users'; ModuleVersion='2.11.0'}


# Requires -Version 7.0

Function Invoke-M365BatchUpdate {
    [CmdletBinding(DefaultParameterSetName = 'ClientSecret')]
    Param(
        [Parameter(Mandatory = $true, HelpMessage = "Azure AD Application Client ID")]
        [String]$ClientId,

        [Parameter(Mandatory = $true, HelpMessage = "Tenant ID (Directory ID)")]
        [String]$TenantId,

        [Parameter(Mandatory = $true, HelpMessage = "Application Client Secret Value")]
        [String]$ClientSecret,

        [Parameter(Mandatory = $true, HelpMessage = "CSVファイルのパス (UserPrincipalName, Department, JobTitleを含む)")]
        [String]$InputCsvPath,

        [Parameter(Mandatory = $true, HelpMessage = "ログファイルの出力パス")]
        [String]$LogFilePath
    )

    # ロギング設定

    $LogDate = Get-Date -Format "yyyyMMdd_HHmmss"
    $LogHeader = "Timestamp,UserPrincipalName,Status,Message"

    # PowerShell 7の並列処理設定 (環境に応じて調整)

    $ThrottleLimit = 10 

    # --- Step 1: MS Graphへの接続（サービスプリンシパル認証） ---

    Write-Host "Connecting to MS Graph using Application ID..."
    try {
        Connect-MgGraph -ClientId $ClientId -TenantId $TenantId -ClientSecret $ClientSecret -Scopes "User.ReadWrite.All"
        Write-Host "Authentication successful."
    }
    catch {
        Write-Error "Failed to connect to MS Graph. Check credentials and permissions. Error: $($_.Exception.Message)"
        return
    }

    # --- Step 2: 入力データの読み込みと前処理 ---

    if (-not (Test-Path $InputCsvPath)) {
        Write-Error "Input CSV file not found: $InputCsvPath"
        return
    }

    $Users = Import-Csv -Path $InputCsvPath
    Write-Host "$($Users.Count) users loaded for processing."
    Add-Content -Path $LogFilePath -Value $LogHeader -Encoding UTF8

    # --- Step 3: 並列処理によるアカウント情報の更新 ---

    $Users | ForEach-Object -Parallel {
        param($User, $LogPath)

        $LogEntry = ""
        $UName = $User.UserPrincipalName

        try {

            # 必須項目チェック

            if (-not $UName) {
                throw "UserPrincipalName is null or empty."
            }

            # 更新パラメータの設定 (Graph SDK V2ではハッシュテーブルを使用)

            $UserParams = @{
                Department = $User.Department
                JobTitle   = $User.JobTitle
            }

            # Graph API呼び出し

            Update-MgUser -UserId $UName -BodyParameter $UserParams -ErrorAction Stop

            $LogEntry = "$(Get-Date), $UName, SUCCESS, 'Department and JobTitle updated.'"

        }
        catch {
            $ErrorMessage = $_.Exception.Message.Replace("`n", " ").Replace("`r", "")
            $LogEntry = "$(Get-Date), $UName, FAILURE, '$ErrorMessage'"
        }
        finally {

            # 並列処理内のログ出力は排他的に行う必要がある


            # ここでは単純化のため Add-Content を使用するが、大規模環境では Runspaceの外部でキューイングするか、ロック機構を導入推奨

            Add-Content -Path $LogPath -Value $LogEntry -Encoding UTF8
        }

    } -ThrottleLimit $ThrottleLimit -AsJob

    # ジョブの完了を待機

    Get-Job | Wait-Job | Out-Null

    # --- Step 4: 後処理 ---

    Write-Host "Batch update complete. Final log output: $LogFilePath"
    Disconnect-MgGraph
}

# --- 実行例 ---


# 注意：資格情報（$Secret）は Azure Key Vault などからセキュアに取得することを強く推奨します。

# $ClientID     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"


# $TenantID     = "yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy"


# $ClientSecret = (Get-Content -Path "C:\Secrets\GraphSecret.txt" -Encoding UTF8 -Raw) | ConvertTo-SecureString -AsPlainText -Force


# $InputCSV     = "C:\Data\UserUpdateList.csv"


# $LogOutput    = "C:\Logs\M365Update_$((Get-Date -Format 'yyyyMMdd_HHmmss')).log"

# Invoke-M365BatchUpdate -ClientId $ClientID -TenantId $TenantID -ClientSecret $ClientSecret `


#                        -InputCsvPath $InputCSV -LogFilePath $LogOutput

# 並列処理未使用（パイプラインシーケンシャル）

Measure-Command {

    # ... シーケンシャルな Get-MgUser や Update-MgUser 処理 ...

}

# 並列処理使用

Measure-Command {
    Invoke-M365BatchUpdate -ClientId $ClientID ... # 上記関数を呼び出し
}