cipp-opslisted

# CIPP Operations The meta-layer — tools for managing CIPP itself rather than the tenants it manages. GDAP for the delegation chain, scheduler for recurring jobs, and health/version/log endpoints for verifying CIPP is reachable and functioning. ## GDAP ### `cipp_list_gdap_roles` ``` cipp_list_gdap_roles() ``` Returns the GDAP (Granular Delegated Admin Privileges) role definitions available — the AAD roles your CSP relationship can grant to your MSP technicians per-tenant. ### `cipp_list_gdap_invites` ``` cipp_list_gdap_invites() ``` Returns pending GDAP relationship invites that customers have not yet accepted. Stale invites > 14 days are usually customers who lost the email — re-send via the CIPP UI. GDAP is the modern replacement for AOBO/DAP. Each invite grants the MSP partner tenant a specific set of AAD roles in the customer tenant for a fixed duration. CIPP relies on active GDAP relationships for nearly every multi-tenant operation; broken GDAP = silent failures across the rest of the toolkit. ## Scheduler ### `cipp_list_scheduled_items` ``` cipp_list_scheduled_items() ``` Lists CIPP's scheduled tasks: recurring standards checks, BPA refreshes, alert evaluations, custom user-defined schedules. ### `cipp_add_scheduled_item` ``` cipp_add_scheduled_item(name, command, parameters?, recurrence?, scheduledTime?) ``` Creates a new scheduled task in CIPP. Use cases: - Schedule a daily BPA refresh for a high-risk tenant - Schedule an end-of-quarter offboarding c