Does the change-analysis extension in Azure cli recognize RBAC changes?

Question

Does the change-analysis extension in Azure cli recognize RBAC changes? I want to be able to generate a change report that shows account roles that have been changed/updated between a specific date/time range.

Answer 1

Hi @vinb123 ,

Thanks for reaching out.

Yes, the change-analysis extension in Azure CLI can recognize RBAC changes. You can use the az change-analysis list command to generate a change report that shows account roles that have been changed/updated between a specific date/time range in the resource group of that subscription.

az change-analysis list -g <resourceGroup> --start-time '07/15/2023' --end-time '07/26/2023'

This will list all the changes in the resourceGroup along with RBAC changes.

Note: Changes will take time to reflect in the change-analysis extension in CLI.

Hope this will help.

Thanks,

Shweta

---

Please remember to "Accept Answer" if answer helped you.