exclude sharepoint admin center deviations

Author: KelvinTegelaar

Modules/CIPPCore/Public/Get-CIPPDrift.ps1

@@ -424,6 +424,11 @@ function Get-CIPPDrift {
 
             # Check for extra Conditional Access policies not in template
             foreach ($TenantCAPolicy in $TenantCAPolicies) {
+                # SharePoint auto-creates '[SharePoint admin center]...' CA policies when unmanaged
+                # device access is restricted (Set-SPOTenant -ConditionalAccessPolicy, e.g. via the
+                # unmanagedSync standard). They are system-managed, cannot be templated and come
+                # back when deleted, so they are never a deviation.
+                if (([string]$TenantCAPolicy.displayName).StartsWith('[SharePoint admin center]')) { continue }
                 $PolicyFound = $false
 
                 foreach ($TemplateCAPolicy in $TemplateCATemplates) {