Deploy-AzureLighthouse.ps1

param(
    [parameter(mandatory)][string]$ManagementGroupName,
    [parameter(mandatory)][string]$SubscriptionID,
    [parameter(mandatory)][string]$ResourceGroupName,
    [parameter(mandatory)][string]$Region,
    [parameter(mandatory)][string]$Country
    #[parameter(mandatory)][string]$Delivery
)
$Country = $Country.ToLower()
$Delivery = 'global'

$RGTemplateParameterFile = ('.\templates\resourcegroup.' + $Delivery + '.' + $Country + '.template.parameters.json')
$SubscriptionTemplateParameterFile = ('.\templates\subscription.' + $Delivery + '.' + $Country + '.template.parameters.json')


if (-not (Get-Module -Name Az.ResourceGraph -ErrorAction SilentlyContinue)) {
    Install-Module Az.ResourceGraph -Force -Confirm:$false
}

Write-Host "Switching to Azure Guardian Subscription" -ForegroundColor Cyan
Set-AzContext -Subscription $SubscriptionID

$ResourceGroup = Get-AzResourceGroup -ResourceGroupName $ResourceGroupName -ErrorAction SilentlyContinue
if ($ResourceGroup -eq $null) {
    Write-Host "$ResourceGroupName does not exist" -ForegroundColor Yellow
    do {
        $ResourceGroupName = Read-Host "Enter name of Resource Group"
    }until(($ResourceGroup = Get-AzResourceGroup -ResourceGroupName $ResourceGroupName) -ne $null)
}
else { Write-Host "Validated Resource Group Name" -ForegroundColor Cyan }


Write-Host "Deploying Azure Lighthouse to $ResourceGroupName" -ForegroundColor Cyan
New-AzSubscriptionDeployment -Name "RGDeployment" -Location $Region -TemplateFile .\resourcegroup.template.json -TemplateParameterFile $RGTemplateParameterFile -rgName $ResourceGroupName
Write-Host "Deployed Azure Lighthouse to $ResourceGroupName" -ForegroundColor Cyan


$ManagementGroup = Get-AzManagementGroup | Where-Object { $_.displayName -eq $ManagementGroupName }
if ($ManagementGroup -eq $null) {
    Write-Host "$ManagementGroupName does not exist" -ForegroundColor Yellow
    do {
        $ManagementGroupName = Read-Host "Enter name of Management Group"  
    }until(($ManagementGroup = Get-AzManagementGroup | Where-Object { $_.displayName -eq $ManagementGroupName }) -ne $null)
}
else { Write-Host "Validated Management Group Name" -ForegroundColor Cyan }

$subscriptions = Search-AzGraph -Query "ResourceContainers | where type =~ 'microsoft.resources/subscriptions'" -ManagementGroup $managementGroup.Name

$enrollmentstatus = @()
ForEach ($subscription in $subscriptions) {
    try {
        Write-Host "Deploying Azure Lighthouse to"$subscription.Name -ForegroundColor Cyan
        Set-AzContext -Subscription $subscription.subscriptionId
        New-AzSubscriptionDeployment -Location $Region -TemplateFile .\subscription.template.json -TemplateParameterFile $SubscriptionTemplateParameterFile
        $data = "" | Select-Object SubscriptionName, SubscriptionID, Status
        $data.SubscriptionName = $subscription.Name
        $data.SubscriptionID = $subscription.subscriptionId
        $data.Status = 'Enrolled'
        $enrollmentstatus += $data
    }
    catch {
        $data = "" | Select-Object SubscriptionName, SubscriptionID, Status
        $data.SubscriptionName = $subscription.Name
        $data.SubscriptionID = $subscription.subscriptionId
        $data.Status = 'NotEnrolled'
        $enrollmentstatus += $data
    }
}

Write-Host "Deployed Azure Lighthouse to subscription/s under" $managementGroup.DisplayName -ForegroundColor Cyan
Write-Host "Enrollment Status for each subscription"
$enrollmentstatus