Az.Resources
This topic displays help topics for the Azure Resource Manager Cmdlets.
Active Directory
Add-AzADAppPermission |
Adds an API permission. |
Add-AzADGroupMember |
Adds member to group. |
Get-AzADAppCredential |
Lists key credentials and password credentials for an application. |
Get-AzADAppFederatedCredential |
Get federatedIdentityCredentials by Id from applications. |
Get-AzADApplication |
Lists entities from applications or get entity from applications by key |
Get-AzADAppPermission |
Lists API permissions the application has requested. |
Get-AzADGroup |
Lists entities from groups or get entity from groups by key |
Get-AzADGroupMember |
Lists members from group. |
Get-AzADGroupOwner |
The owners of the group. Limited to 100 owners. Nullable. If this property is not specified when creating a Microsoft 365 group, the calling user is automatically assigned as the group owner. Supports $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1). Supports $expand including nested $select. For example, /groups?$filter=startsWith(displayName,'Role')&$select=id,displayName&$expand=owners($select=id,userPrincipalName,displayName). |
Get-AzADOrganization |
Retrieve a list of organization objects. |
Get-AzADServicePrincipal |
Lists entities from service principals or get entity from service principals by key |
Get-AzADServicePrincipalAppRoleAssignment |
Get appRoleAssignments from servicePrincipals |
Get-AzADSpCredential |
Lists key credentials and password credentials for an service principal. |
Get-AzADUser |
Lists entities from users or get entity from users by key |
New-AzADAppCredential |
Creates key credentials or password credentials for an application. |
New-AzADAppFederatedCredential |
Create federatedIdentityCredential for applications. |
New-AzADApplication |
Adds new entity to applications |
New-AzADGroup |
Adds new entity to groups |
New-AzADGroupOwner |
Create new navigation property ref to owners for groups |
New-AzADServicePrincipal |
Adds new entity to servicePrincipals |
New-AzADServicePrincipalAppRoleAssignment |
Create new navigation property to appRoleAssignments for servicePrincipals |
New-AzADSpCredential |
Creates key credentials or password credentials for an service principal. |
New-AzADUser |
Adds new entity to users |
Remove-AzADAppCredential |
Removes key credentials or password credentials for an application. |
Remove-AzADAppFederatedCredential |
Delete navigation property federatedIdentityCredentials for applications |
Remove-AzADApplication |
Deletes entity from applications |
Remove-AzADAppPermission |
Removes an API permission. |
Remove-AzADGroup |
Deletes entity from groups. |
Remove-AzADGroupMember |
Deletes member from group Users, contacts, and groups that are members of this group. HTTP Methods: GET (supported for all groups), POST (supported for security groups and mail-enabled security groups), DELETE (supported only for security groups) Read-only. Nullable. Supports $expand. |
Remove-AzADGroupOwner |
Delete ref of navigation property owners for groups |
Remove-AzADServicePrincipal |
Deletes entity from service principal. |
Remove-AzADServicePrincipalAppRoleAssignment |
Delete navigation property appRoleAssignments for servicePrincipals |
Remove-AzADSpCredential |
Removes key credentials or password credentials for an service principal. |
Remove-AzADUser |
Deletes entity from users. |
Update-AzADAppFederatedCredential |
Update the navigation property federatedIdentityCredentials in applications |
Update-AzADApplication |
Updates entity in applications |
Update-AzADGroup |
Update entity in groups |
Update-AzADServicePrincipal |
Updates entity in service principal |
Update-AzADServicePrincipalAppRoleAssignment |
Update the navigation property appRoleAssignments in servicePrincipals |
Update-AzADUser |
Updates entity in users |
Managed Applications
Get-AzManagedApplication |
Gets managed applications |
Get-AzManagedApplicationDefinition |
Gets managed application definitions |
New-AzManagedApplication |
Creates an Azure managed application. |
New-AzManagedApplicationDefinition |
Creates a managed application definition. |
Remove-AzManagedApplication |
Removes a managed application |
Remove-AzManagedApplicationDefinition |
Removes a managed application definition |
Set-AzManagedApplication |
Updates managed application |
Set-AzManagedApplicationDefinition |
Updates managed application definition |
Policy
Get-AzPolicyAlias |
Get-AzPolicyAlias retrieves and outputs Azure provider resource types that have aliases defined and match the given parameter values. If no parameters are provided, all provider resource types that contain an alias will be output. The -ListAvailable switch modifies this behavior by listing all matching resource types including those without aliases. |
Get-AzPolicyAssignment |
Gets policy assignments. |
Get-AzPolicyDefinition |
Gets policy set definitions. |
Get-AzPolicyExemption |
Gets policy exemptions. |
Get-AzPolicySetDefinition |
Gets policy set definitions. |
Get-AzRoleManagementPolicy |
Get the specified role management policy for a resource scope |
Get-AzRoleManagementPolicyAssignment |
Get the specified role management policy assignment for a resource scope |
New-AzPolicyAssignment |
Creates or updates a policy assignment. |
New-AzPolicyDefinition |
Creates or updates a policy definition. |
New-AzPolicyExemption |
Creates or updates a policy exemption. |
New-AzPolicySetDefinition |
Creates or updates a policy set definition. |
New-AzRoleManagementPolicyAssignment |
Create a role management policy assignment |
Remove-AzPolicyAssignment |
This operation deletes a policy assignment, given its name and the scope it was created in. The scope of a policy assignment is the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. |
Remove-AzPolicyDefinition |
This operation deletes the policy definition in the given subscription with the given name. |
Remove-AzPolicyExemption |
This operation deletes a policy exemption, given its name and the scope it was created in. The scope of a policy exemption is the part of its ID preceding '/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}'. |
Remove-AzPolicySetDefinition |
This operation deletes the policy definition in the given subscription with the given name. |
Remove-AzRoleManagementPolicy |
Delete a role management policy |
Remove-AzRoleManagementPolicyAssignment |
Delete a role management policy assignment |
Update-AzPolicyAssignment |
This operation updates a policy assignment with the given scope and name. Policy assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group. |
Update-AzPolicyDefinition |
This operation updates an existing policy definition in the given subscription or management group with the given name. |
Update-AzPolicyExemption |
This operation updates a policy exemption with the given scope and name. |
Update-AzPolicySetDefinition |
This operation updates an existing policy set definition in the given subscription or management group with the given name. |
Update-AzRoleManagementPolicy |
Update a role management policy |
Resources
Export-AzResourceGroup |
Captures a resource group as a template and saves it to a file. |
Export-AzTemplateSpec |
Exports a Template Spec to the local filesystem |
Get-AzDenyAssignment |
Lists Azure RBAC deny assignments at the specified scope. By default it lists all deny assignments in the selected Azure subscription. Use respective parameters to list deny assignments to a specific user, or to list deny assignments on a specific resource group or resource. The cmdlet may call below Microsoft Graph API according to input parameters:
|
Get-AzDeployment |
Get deployment |
Get-AzDeploymentOperation |
Get deployment operation |
Get-AzDeploymentScript |
Gets or lists deployment scripts. |
Get-AzDeploymentScriptLog |
Gets the log of a deployment script execution. |
Get-AzDeploymentWhatIfResult |
Gets a template What-If result for a deployment at subscription scope. |
Get-AzLocation |
Gets all locations and the supported resource providers for each location. |
Get-AzManagementGroup |
Gets Management Group(s) |
Get-AzManagementGroupDeployment |
Get deployment at a management group |
Get-AzManagementGroupDeploymentOperation |
Get deployment operation for management group deployment |
Get-AzManagementGroupDeploymentStack |
Gets Management Group scoped Deployment Stacks. |
Get-AzManagementGroupDeploymentWhatIfResult |
Gets a template What-If result for a deployment at management group scope. |
Get-AzManagementGroupEntity |
Lists all Entities under the current Tenant |
Get-AzManagementGroupHierarchySetting |
Gets the Hierarchy Settings under the current tenant |
Get-AzManagementGroupNameAvailability |
Checks if the Management Group name is available in the Tenant and a valid name. |
Get-AzManagementGroupSubscription |
Gets the details of Subscription(s) under a Management Group. |
Get-AzPrivateLinkAssociation |
Gets all the Azure Resource Management Private Link Association(s). |
Get-AzProviderFeature |
Gets information about Azure provider features. |
Get-AzProviderOperation |
Gets the operations for an Azure resource provider that are securable using Azure RBAC. |
Get-AzProviderPreviewFeature |
Gets a feature registration in your account. |
Get-AzResource |
Gets resources. |
Get-AzResourceGroup |
Gets resource groups. |
Get-AzResourceGroupDeployment |
Gets the deployments in a resource group. |
Get-AzResourceGroupDeploymentOperation |
Gets the resource group deployment operation |
Get-AzResourceGroupDeploymentStack |
Gets Resource Group scoped Deployment Stacks. |
Get-AzResourceGroupDeploymentWhatIfResult |
Gets a template What-If result for a deployment at resource group scope. |
Get-AzResourceLock |
Gets a resource lock. |
Get-AzResourceManagementPrivateLink |
Gets Azure Resource Management Private Link(s) |
Get-AzResourceProvider |
Gets a resource provider. |
Get-AzRoleAssignment |
Lists Azure RBAC role assignments at the specified scope. By default it lists all role assignments in the selected Azure subscription. Use respective parameters to list assignments to a specific user, or to list assignments on a specific resource group or resource. The cmdlet may call below Microsoft Graph API according to input parameters:
Please notice that this cmdlet will mark |
Get-AzRoleAssignmentSchedule |
Get the specified role assignment schedule for a resource scope |
Get-AzRoleAssignmentScheduleInstance |
Gets the specified role assignment schedule instance. |
Get-AzRoleAssignmentScheduleRequest |
Get the specified role assignment schedule request. |
Get-AzRoleDefinition |
Lists all Azure RBAC roles that are available for assignment. |
Get-AzRoleEligibilitySchedule |
Get the specified role eligibility schedule for a resource scope |
Get-AzRoleEligibilityScheduleInstance |
Gets the specified role eligibility schedule instance. |
Get-AzRoleEligibilityScheduleRequest |
Get the specified role eligibility schedule request. |
Get-AzRoleEligibleChildResource |
Get the child resources of a resource on which user has eligible access |
Get-AzSubscriptionDeploymentStack |
Gets Subscription scoped Deployment Stacks. |
Get-AzTag |
Gets predefined Azure tags | Gets the entire set of tags on a resource or subscription. |
Get-AzTemplateSpec |
Gets or lists Template Specs |
Get-AzTenantBackfillStatus |
Get the current Tenant Backfill Subscription Status |
Get-AzTenantDeployment |
Get deployment at tenant scope |
Get-AzTenantDeploymentOperation |
Get deployment operation for deployment at tenant scope |
Get-AzTenantDeploymentWhatIfResult |
Gets a template What-If result for a deployment at tenant scope. |
Invoke-AzResourceAction |
Invokes an action on a resource. |
Move-AzResource |
Moves a resource to a different resource group or subscription. |
New-AzDeployment |
Create a deployment at the current subscription scope. |
New-AzManagementGroup |
Creates a Management Group |
New-AzManagementGroupDeployment |
Create a deployment at a management group |
New-AzManagementGroupDeploymentStack |
Creates a new Management Group scoped Deployment Stack. |
New-AzManagementGroupHierarchySetting |
Creates Hierarchy Settings under the current tenant |
New-AzManagementGroupSubscription |
Adds a Subscription to a Management Group. |
New-AzPrivateLinkAssociation |
Creates the Azure Resource Management Private Link Association. |
New-AzResource |
Creates a resource. |
New-AzResourceGroup |
Creates an Azure resource group. |
New-AzResourceGroupDeployment |
Adds an Azure deployment to a resource group. |
New-AzResourceGroupDeploymentStack |
Creates a new Resource Group scoped Deployment Stack. |
New-AzResourceLock |
Creates a resource lock. |
New-AzResourceManagementPrivateLink |
Create Azure Resource Management Private Link |
New-AzRoleAssignment |
Assigns the specified RBAC role to the specified principal, at the specified scope. The cmdlet may call below Microsoft Graph API according to input parameters:
Please notice that this cmdlet will mark |
New-AzRoleAssignmentScheduleRequest |
Creates a role assignment schedule request. |
New-AzRoleDefinition |
Creates a custom role in Azure RBAC. Provide either a JSON role definition file or a PSRoleDefinition object as input. First, use the Get-AzRoleDefinition command to generate a baseline role definition object. Then, modify its properties as required. Finally, use this command to create a custom role using role definition. |
New-AzRoleEligibilityScheduleRequest |
Creates a role eligibility schedule request. |
New-AzSubscriptionDeploymentStack |
Creates a new Subscription scoped Deployment Stack. |
New-AzTag |
Creates a predefined Azure tag or adds values to an existing tag | Creates or updates the entire set of tags on a resource or subscription. |
New-AzTemplateSpec |
Creates a new Template Spec. |
New-AzTenantDeployment |
Create a deployment at tenant scope |
Publish-AzBicepModule |
Publishes a Bicep file to a registry. |
Register-AzProviderFeature |
Registers an Azure provider feature in your current subscription context. |
Register-AzProviderPreviewFeature |
Creates a feature registration in your account. |
Register-AzResourceProvider |
Registers a resource provider. |
Remove-AzDeployment |
Removes a deployment and any associated operations |
Remove-AzDeploymentScript |
Removes a deployment script and its associated resources. |
Remove-AzManagementGroup |
Removes a Management Group |
Remove-AzManagementGroupDeployment |
Removes a deployment at a management group and any associated operations |
Remove-AzManagementGroupDeploymentStack |
Removes a Management Group scoped Deployment Stack. |
Remove-AzManagementGroupHierarchySetting |
Deletes all Hierarchy Settings under the current tenant |
Remove-AzManagementGroupSubscription |
Removes a Subscription from a Management Group. |
Remove-AzPrivateLinkAssociation |
Delete a specific azure private link association. |
Remove-AzResource |
Removes a resource. |
Remove-AzResourceGroup |
Removes a resource group. |
Remove-AzResourceGroupDeployment |
Removes a resource group deployment and any associated operations. |
Remove-AzResourceGroupDeploymentStack |
Removes a Resource Group scoped Deployment Stack. |
Remove-AzResourceLock |
Removes a resource lock. |
Remove-AzResourceManagementPrivateLink |
Deletes the Resource Manangement Private Link. |
Remove-AzRoleAssignment |
Removes a role assignment to the specified principal who is assigned to a particular role at a particular scope. The cmdlet may call below Microsoft Graph API according to input parameters:
Please notice that this cmdlet will mark |
Remove-AzRoleDefinition |
Deletes a custom role in Azure RBAC. The role to be deleted is specified using the Id property of the role. Delete will fail if there are existing role assignments made to the custom role. |
Remove-AzSubscriptionDeploymentStack |
Removes a Subscription scoped Deployment Stack. |
Remove-AzTag |
Deletes predefined Azure tags or values | Deletes the entire set of tags on a resource or subscription. |
Remove-AzTemplateSpec |
Removes a Template Spec |
Remove-AzTenantDeployment |
Removes a deployment at tenant scope and any associated operations |
Save-AzDeploymentScriptLog |
Saves the log of a deployment script execution to disk. |
Save-AzDeploymentTemplate |
Saves a deployment template to a file. |
Save-AzManagementGroupDeploymentStackTemplate |
Saves a Management Group scoped Deployment Stack Template. |
Save-AzManagementGroupDeploymentTemplate |
Saves a deployment template to a file. |
Save-AzResourceGroupDeploymentStackTemplate |
Saves a Resource Group scoped Deployment Stack Template. |
Save-AzResourceGroupDeploymentTemplate |
Saves a resource group deployment template to a file. |
Save-AzSubscriptionDeploymentStackTemplate |
Saves a Subscription scoped Deployment Stack Template. |
Save-AzTenantDeploymentTemplate |
Saves a deployment template to a file. |
Set-AzManagementGroupDeploymentStack |
Sets a new Management Group scoped Deployment Stack. |
Set-AzResource |
Modifies a resource. |
Set-AzResourceGroup |
Modifies a resource group. |
Set-AzResourceGroupDeploymentStack |
Sets a new Resource Group scoped Deployment Stack. |
Set-AzResourceLock |
Modifies a resource lock. |
Set-AzRoleAssignment |
Update an existing Role Assignment. The cmdlet may call below Microsoft Graph API according to input parameters:
Please notice that this cmdlet will mark |
Set-AzRoleDefinition |
Modifies a custom role in Azure RBAC. Provide the modified role definition either as a JSON file or as a PSRoleDefinition. First, use the Get-AzRoleDefinition command to retrieve the custom role that you wish to modify. Then, modify the properties that you wish to change. Finally, save the role definition using this command. |
Set-AzSubscriptionDeploymentStack |
Sets a new Subscription scoped Deployment Stack. |
Set-AzTemplateSpec |
Modifies a Template Spec. |
Start-AzTenantBackfill |
Starts backfilling subscriptions for the current Tenant |
Stop-AzDeployment |
Cancel a running deployment |
Stop-AzManagementGroupDeployment |
Cancel a running deployment at a management group |
Stop-AzResourceGroupDeployment |
Cancels a resource group deployment. |
Stop-AzRoleAssignmentScheduleRequest |
Cancels a pending role assignment schedule request. |
Stop-AzRoleEligibilityScheduleRequest |
Cancels a pending role eligibility schedule request. |
Stop-AzTenantDeployment |
Cancel a running deployment at tenant scope |
Test-AzDeployment |
Validates a deployment. |
Test-AzManagementGroupDeployment |
Validates a deployment at a management group. |
Test-AzManagementGroupDeploymentStack |
Validates a management group scoped deployment stack. |
Test-AzResourceGroupDeployment |
Validates a resource group deployment. |
Test-AzResourceGroupDeploymentStack |
Validates a resource group scoped deployment stack. |
Test-AzSubscriptionDeploymentStack |
Validates a subscription scoped deployment stack. |
Test-AzTenantDeployment |
Validates a deployment at tenant scope. |
Unregister-AzProviderFeature |
Unregisters an Azure provider feature in your account. |
Unregister-AzProviderPreviewFeature |
Removes a feature registration from your account. |
Unregister-AzResourceProvider |
Unregisters a resource provider. |
Update-AzManagementGroup |
Updates a Management Group |
Update-AzManagementGroupHierarchySetting |
Updates Hierarchy Settings under the current tenant |
Update-AzTag |
Selectively updates the set of tags on a resource or subscription. |
Azure PowerShell