Get-AzRoleEligibleChildResource
Get the child resources of a resource on which user has eligible access
Syntax
Get-AzRoleEligibleChildResource
-Scope <String>
[-Filter <String>]
[-DefaultProfile <PSObject>]
[<CommonParameters>]
Get-AzRoleEligibleChildResource
-InputObject <IAuthorizationIdentity>
[-Filter <String>]
[-DefaultProfile <PSObject>]
[<CommonParameters>]
Description
Get the child resources of a resource on which user has eligible access
Examples
Example 1: List all child resources
$scope = "/subscriptions/38ab2ccc-3747-4567-b36b-9478f5602f0d/"
Get-AzRoleEligibleChildResource -Scope $scope
Name Type
---- ----
AnujRG resourcegroup
ARPJ-TESTRG-01 resourcegroup
AnujRG2 resourcegroup
asghodke-rg resourcegroup
Get all child resources of a resource scope
that the calling user has eligible assignment(s) on.
Example 2: List all child resources filtered by resource type
$scope = "/subscriptions/38ab2ccc-3747-4567-b36b-9478f5602f0d/"
$filter = "resoureType eq 'resourcegroup'"
Get-AzRoleEligibleChildResource -Scope $scope -Filter $filter
Name Type
---- ----
AnujRG resourcegroup
ARPJ-TESTRG-01 resourcegroup
AnujRG2 resourcegroup
asghodke-rg resourcegroup
You can filter by subscriptions, resourceGroups or any resource type.
Parameters
-DefaultProfile
The DefaultProfile parameter is not functional. Use the SubscriptionId parameter when available if executing the cmdlet against a different subscription.
Type: | PSObject |
Aliases: | AzureRMContext, AzureCredential |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-Filter
The filter to apply on the operation. Use $filter=resourceType+eq+'Subscription' to filter on only resource of type = 'Subscription'. Use $filter=resourceType+eq+'subscription'+or+resourceType+eq+'resourcegroup' to filter on resource of type = 'Subscription' or 'ResourceGroup'
Type: | String |
Position: | Named |
Default value: | None |
Required: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
-InputObject
Identity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.
Type: | IAuthorizationIdentity |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | True |
Accept wildcard characters: | False |
-Scope
The scope of the role management policy.
Type: | String |
Position: | Named |
Default value: | None |
Required: | True |
Accept pipeline input: | False |
Accept wildcard characters: | False |