diff --git a/Scripts/Helpers/Remove-GlobalNotScopes.ps1 b/Scripts/Helpers/Remove-GlobalNotScopes.ps1 index 96fa916d..50593c57 100644 --- a/Scripts/Helpers/Remove-GlobalNotScopes.ps1 +++ b/Scripts/Helpers/Remove-GlobalNotScopes.ps1 @@ -4,7 +4,7 @@ function Remove-GlobalNotScopes { $AssignmentNotScopes, $GlobalNotScopes ) - if ($null -ne $AssignmentNotScopes -or $AssignmentNotScopes.Count -eq 0) { + if ($null -eq $AssignmentNotScopes -or $AssignmentNotScopes.Count -eq 0) { $null } elseif ($GlobalNotScopes.Count -eq 0) { diff --git a/Scripts/Operations/Export-AzPolicyResources.ps1 b/Scripts/Operations/Export-AzPolicyResources.ps1 index a46c9608..4f88c459 100644 --- a/Scripts/Operations/Export-AzPolicyResources.ps1 +++ b/Scripts/Operations/Export-AzPolicyResources.ps1 @@ -696,9 +696,8 @@ foreach ($pacSelector in $globalSettings.pacEnvironmentSelectors) { $scope = $policyAssignment.resourceIdParts.scope $notScopes = Remove-GlobalNotScopes ` - -AssignmentNotScopes $policyAssignment.notScopes ` + -AssignmentNotScopes $policyAssignment.properties.notScopes ` -GlobalNotScopes $pacEnvironment.globalNotScopes - $additionalRoleAssignments = [System.Collections.ArrayList]::new() foreach ($role in $roles) { if ($scope -ne $role.scope) {