resource "microsoft365wp_device_management_configuration_policy" "enable_laps" {
  name = "LAPS"
  settings = [
    { instance = {
      definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd"
      choice = {
        value = {
          value = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_1"
          children = [
            {
              definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordagedays"
              simple        = { value = { integer = { value = "14" } } }
            },
            {
              definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity"
              choice        = { value = { value = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordcomplexity_4" } }
            },
            {
              definition_id = "device_vendor_msft_policy_config_admx_admpwd_pol_admpwd_elm_admpwd_passwordlength"
              simple        = { value = { integer = { value = "14" } } }
            }

          ]
        }
      }
    } },
    { instance = {
      definition_id = "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus"
      choice        = { value = { value = "device_vendor_msft_policy_config_localpoliciessecurityoptions_accounts_enableadministratoraccountstatus_1" } }
    } }
  ]
  depends_on = [azuread_group.mem_windows_devices]
  assignments = [
    for x in [
      "${data.azuread_group.mem_windows_devices.object_id}"
    ] :
    { target = { group = { group_id = x } } }
  ]

}