Switch-SIJobOrchestration
Switch between the daily job flow and one timer per job
Purpose
Container install: switches the jobs between the daily pipeline (one flow) and one schedule per job. Previewed; reversible.
When to run it
When the install should run its jobs as one pipeline, or each on its own timer.
Who may run it
| Kind | Role | Scope | Why |
|---|---|---|---|
| azureRbac | Contributor (or Container Apps Contributor) | the install's resource group | to change the jobs' triggers |
What it changes
| Where | Action | What | Permission / role | Scope | Why | Undo |
|---|---|---|---|---|---|---|
| Container Apps jobs | update | each job's trigger (schedule / manual) | the install's resource group | one flow, or a timer per job | run it again with the other -Mode |
What it only reads
- the jobs and their current triggers
Parameters
| Parameter | Required | Default | What it does |
|---|---|---|---|
| -Mode | yes | ||
| -ResourceGroupName | no | $(if ($global:SI_Bootstrap_ResourceGroupName) { [string]$global:SI_Bootstrap_ResourceGroupName } else { '' }) | |
| -SubscriptionId | no | $(if ($global:SI_Bootstrap_SubscriptionId) { [string]$global:SI_Bootstrap_SubscriptionId } else { [string]$global:SI_AzSubscriptionId }) | |
| -ApiVersion | no | '2025-07-01' | |
| -Apply | no |
Preview with -WhatIf
The plan: every job's trigger before / after; no job is changed (same as without -Apply).
Undo
Run it again with the other -Mode.
Network
It connects to: *.blob.core.windows.net, *.queue.core.windows.net, *.table.core.windows.net, *.vault.azure.net, 169.254.169.254, api.loganalytics, api.loganalytics.io, api.msrc.microsoft.com, api.security.microsoft.com, api.securitycenter.microsoft.com, api.securityplatform.microsoft.com, database.windows.net, entra.microsoft.com, graph.microsoft.com, invardia.com, licenses.nuget.org, login.microsoftonline.com, management.azure.com, monitor.azure.com, nvd.nist.gov, outlook.office.com, outlook.office365.com, portal.invardia.com, storage.azure.com, vault.azure.net, www.powershellgallery.com
Download and run
Run these lines in PowerShell: the first downloads the script into the current folder, the second runs it.
Invoke-WebRequest https://invardia.com/support/si/Switch-SIJobOrchestration.ps1 -OutFile Switch-SIJobOrchestration.ps1
.\Switch-SIJobOrchestration.ps1 -Mode <Mode>To check the download first, compare its SHA-256 with the published one:
SHA-256 26480ce53e166fe3f586237da6c621b744694844ce2690e63dd81e795f39243f
Checksums: SHA256SUMS.txt · Version 3.0.79
Before you run it, compare the file's SHA-256 with its line in SHA256SUMS.txt.
Every parameter: Get-Help .\Switch-SIJobOrchestration.ps1 -Full · Source: Switch-SIJobOrchestration.ps1
Every script, identity and permission for your security review: SecurityInsight