add as system for store apps

Synced from CyberDrain/CIPP@0cdc800

Author: github-actions[bot]

Modules/CIPPCore/Public/New-CIPPIntuneAppDeployment.ps1

@@ -32,14 +32,16 @@ function New-CIPPIntuneAppDeployment {
         if (-not $PackageId) {
             throw "PackageName/packagename is required for WinGet apps but was not found in the config for '$AppDisplayName'."
         }
+        # Default to system when InstallAsSystem is absent so existing templates keep their behavior
+        $RunAsAccount = if ($null -ne $AppConfig.InstallAsSystem -and -not [bool]$AppConfig.InstallAsSystem) { 'user' } else { 'system' }
         $IntuneBody = [ordered]@{
             '@odata.type'       = '#microsoft.graph.winGetApp'
             'displayName'       = "$AppDisplayName"
             'description'       = "$($AppConfig.description)"
             'packageIdentifier' = "$PackageId"
             'installExperience' = @{
                 '@odata.type'  = 'microsoft.graph.winGetAppInstallExperience'
-                'runAsAccount' = 'system'
+                'runAsAccount' = $RunAsAccount
             }
         }
     }

Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddStoreApp.ps1

@@ -15,15 +15,17 @@ function Invoke-AddStoreApp {
     $WinGetApp = $Request.Body
     $assignTo = $Request.Body.AssignTo -eq 'customGroup' ? $Request.Body.CustomGroup : $Request.Body.AssignTo
 
-    if ($ChocoApp.InstallAsSystem) { 'system' } else { 'user' }
+    # winGetAppInstallExperience only supports runAsAccount (no restart behavior). Default to
+    # system when the toggle is absent so older callers keep the previous behavior.
+    $RunAsAccount = if ($null -ne $WinGetApp.InstallAsSystem -and -not [bool]$WinGetApp.InstallAsSystem) { 'user' } else { 'system' }
     $WinGetData = [ordered]@{
         '@odata.type'       = '#microsoft.graph.winGetApp'
         'displayName'       = "$($WinGetApp.ApplicationName)"
         'description'       = "$($WinGetApp.description)"
         'packageIdentifier' = "$($WinGetApp.PackageName)"
         'installExperience' = @{
             '@odata.type'  = 'microsoft.graph.winGetAppInstallExperience'
-            'runAsAccount' = 'system'
+            'runAsAccount' = $RunAsAccount
         }
     }
     $AllowedTenants = Test-CIPPAccess -Request $Request -TenantList