arazzo: 1.0.1
info:
  title: Microsoft Endpoint Configuration Management ConfigMgr Update Compliance Review
  summary: Review pending software updates, configuration baseline assignments, and target collections.
  description: >-
    A Configuration Manager AdminService compliance review flow. The workflow
    lists software updates that are still missing on systems, lists the
    configuration baseline assignments in the site, and lists the collections
    those assignments and deployments target, giving an administrator the
    inputs needed to plan remediation. Every step spells out its request inline
    so the flow can be read and executed without opening the underlying OpenAPI
    description.
  version: 1.0.0
sourceDescriptions:
- name: configMgrRestApi
  url: ../openapi/microsoft-endpoint-configuration-management-configmgr-rest-api-openapi.yml
  type: openapi
workflows:
- workflowId: configmgr-update-compliance-review
  summary: List missing software updates, baseline assignments, and collections.
  description: >-
    Lists software updates filtered to those with missing installs, lists
    configuration baseline assignments, and lists collections to identify
    remediation targets.
  inputs:
    type: object
    properties:
      top:
        type: integer
        description: Maximum number of records to return per list.
  steps:
  - stepId: listMissingUpdates
    description: List software updates that are still missing on one or more systems.
    operationId: listSoftwareUpdates
    parameters:
    - name: $filter
      in: query
      value: "NumMissing gt 0"
    - name: $top
      in: query
      value: $inputs.top
    - name: Authorization
      in: header
      value: "Negotiate"
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      updates: $response.body#/value
  - stepId: listBaselines
    description: List configuration baseline assignments in the site.
    operationId: listBaselineAssignments
    parameters:
    - name: $top
      in: query
      value: $inputs.top
    - name: Authorization
      in: header
      value: "Negotiate"
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      baselineAssignments: $response.body#/value
  - stepId: listTargetCollections
    description: List collections that baselines and deployments can target.
    operationId: listCollections
    parameters:
    - name: $top
      in: query
      value: $inputs.top
    - name: Authorization
      in: header
      value: "Negotiate"
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      collections: $response.body#/value
  outputs:
    updates: $steps.listMissingUpdates.outputs.updates
    baselineAssignments: $steps.listBaselines.outputs.baselineAssignments
    collections: $steps.listTargetCollections.outputs.collections