What am I missing here as I get errors.

[chet18]

function get-bitlockerEscrowStatusForAzureADDevices{
#Requires -Modules ImportExcel
<#
.SYNOPSIS
Retrieves bitlocker key upload status for all azure ad devices
.DESCRIPTION
Use this report to determine which of your devices have backed up their bitlocker key to AzureAD (and find those that haven’t and are at risk of data loss!).
Report will be stored in current folder.
.EXAMPLE
get-bitlockerEscrowStatusForAzureADDevices
.PARAMETER Credential
Optional, pass a credential object to automatically sign in to Azure AD. Global Admin permissions required
.PARAMETER showBitlockerKeysInReport
Switch, is supplied, will show the actual recovery keys in the report. Be careful where you distribute the report to if you use this
.PARAMETER showAllOSTypesInReport
By default, only the Windows OS is reported on, if for some reason you like the additional information this report gives you about devices in general, you can add this switch to show all OS types
.NOTES
filename: get-bitlockerEscrowStatusForAzureADDevices.ps1
author: Jos Lieben
blog: www.lieben.nu
created: 9/4/2019
#>
[cmdletbinding()]
Param(
$Credential,
[Switch]$showBitlockerKeysInReport,
[Switch]$showAllOSTypesInReport
)

Import-Module AzureRM.Profile
if (Get-Module -Name “AzureADPreview” -ListAvailable) {
Import-Module AzureADPreview
} elseif (Get-Module -Name “AzureAD” -ListAvailable) {
Import-Module AzureAD
}

if ($Credential) {
Try {
Connect-AzureAD -Credential $Credential -ErrorAction Stop | Out-Null
} Catch {
Write-Warning “Couldn’t connect to Azure AD non-interactively, trying interactively.”
Connect-AzureAD -TenantId $(($Credential.UserName.Split(“@”))[1]) -ErrorAction Stop | Out-Null
}

Try {
Login-AzureRmAccount -Credential $Credential -ErrorAction Stop | Out-Null
} Catch {
Write-Warning “Couldn’t connect to Azure RM non-interactively, trying interactively.”
Login-AzureRmAccount -TenantId $(($Credential.UserName.Split(“@”))[1]) -ErrorAction Stop | Out-Null
}
} else {
Login-AzureRmAccount -ErrorAction Stop | Out-Null
}
$context = Get-AzureRmContext
$tenantId = $context.Tenant.Id
$refreshToken = @($context.TokenCache.ReadItems() | where {$.tenantId -eq $tenantId -and $.ExpiresOn -gt (Get-Date)})[0].RefreshToken
$body = “grant_type=refresh_token&refresh_token=$($refreshToken)&resource=74658136-14ec-4630-ad9b-26e160ff0fc6”
$apiToken = Invoke-RestMethod " https://login.windows.net/$tenantId/oauth2/token" ; -Method POST -Body $body -ContentType ‘application/x-www-form-urlencoded’
$restHeader = @{
‘Authorization’ = 'Bearer ’ + $apiToken.access_token
‘X-Requested-With’= ‘XMLHttpRequest’
‘x-ms-client-request-id’= [guid]::NewGuid()
‘x-ms-correlation-id’ = [guid]::NewGuid()
}
Write-Verbose “Connected, retrieving devices…”
$restResult = Invoke-RestMethod -Method GET -UseBasicParsing -Uri " https://main.iam.ad.ext.azure.com/api/Devices?nextLink=&queryParams={“searchText”%3A"“}&top=15” ; -Headers $restHeader
$allDevices = @()
$allDevices += $restResult.value
while($restResult.nextLink){
$restResult = Invoke-RestMethod -Method GET -UseBasicParsing -Uri " https://main.iam.ad.ext.azure.com/api/Devices?nextLink=$([System.Web.HttpUtility]::UrlEncode($restRe ; -Headers $restHeader
$allDevices += $restResult.value
}

Write-Verbose “Retrieved $($allDevices.Count) devices from AzureAD, processing information…”

$csvEntries = @()
foreach($device in $allDevices){
if(!$showAllOSTypesInReport -and $device.deviceOSType -notlike “Windows*”){
Continue
}
$keysKnownToAzure = $False
$osDriveEncrypted = $False
$lastKeyUploadDate = $Null
if($device.deviceOSType -eq “Windows” -and $device.bitLockerKey.Count -gt 0){
$keysKnownToAzure = $True
$keys = $device.bitLockerKey | Sort-Object -Property creationTime -Descending
if($keys.driveType -contains “Operating system drive”){
$osDriveEncrypted = $True

}
$lastKeyUploadDate = $keys[0].creationTime
if($showBitlockerKeysInReport){
$bitlockerKeys = “”
foreach($key in $device.bitlockerKey){
$bitlockerKeys += “$($key.creationTime)|$($key.driveType)|$($key.recoveryKey)|”
}
}else{
$bitlockerKeys = “HIDDEN FROM REPORT: READ INSTRUCTIONS TO REVEAL KEYS”
}
}else{
$bitlockerKeys = “NOT UPLOADED YET OR N/A”
$device.Ownership = “Corporate”
$device.Ownership = “Personal”
}

$csvEntries += [PSCustomObject]@{“Name”=$device.displayName;“BitlockerKeysUploadedToAzureAD”=$keysKnownToAzure;“OS Drive encrypted”=$osDriveEncrypted;“lastKeyUploadDate”=$lastKeyUploadDate;“DeviceAccountEnabled”=$device.accountEnabled;“managed”=$device.isManaged;“ManagedBy”=$device.managedBy;“lastLogon”=$device.approximateLastLogonTimeStamp;“Owner”=$device.Owner.userPrincipalName;“bitlockerKeys”=$bitlockerKeys;“OS”=$device.deviceOSType;“OSVersion”=$device.deviceOSVersion;“Trust Type”=$device.deviceTrustType;“dirSynced”=$device.dirSyncEnabled;“Compliant”=$device.isCompliant;“Corporate”=$device.Ownership;“Personal”=$device.Ownership}
}
$csvEntries | Export-Excel -workSheetName “BitlockerReport” -path “C:\BitLockerReport.xlsx” -ClearSheet -TableName “BitlockerReport” -AutoSize -Verbose
}

get-bitlockerEscrowStatusForAzureADDevices

Here is the error
Exception setting “Ownership”: “The property ‘Ownership’ cannot be found on this object. Verify that the property exists and can be set.”

[Neally]

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum!

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

• Neally Bot

[mehmet1909 (Anteplimg)]

you do not miss anything, everything is here in this script :)…