Hi @vinb123 ,
Thanks for reaching out.
Yes, the change-analysis extension in Azure CLI can recognize RBAC changes. You can use the
az change-analysis list command to generate a change report that shows account roles that have been changed/updated between a specific date/time range in the resource group of that subscription.
az change-analysis list -g <resourceGroup> --start-time '07/15/2023' --end-time '07/26/2023'
This will list all the changes in the resourceGroup along with RBAC changes.
Note: Changes will take time to reflect in the change-analysis extension in CLI.
Hope this will help.
Please remember to "Accept Answer" if answer helped you.