Does the change-analysis extension in Azure cli recognize RBAC changes?

vinb123 20 Reputation points
2023-07-21T15:35:40.65+00:00

Does the change-analysis extension in Azure cli recognize RBAC changes? I want to be able to generate a change report that shows account roles that have been changed/updated between a specific date/time range.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
603 questions
0 comments No comments
{count} votes

Accepted answer
  1. Shweta Mathur 25,471 Reputation points Microsoft Employee
    2023-07-25T03:43:51.0366667+00:00

    Hi @vinb123 ,

    Thanks for reaching out.

    Yes, the change-analysis extension in Azure CLI can recognize RBAC changes. You can use the az change-analysis list command to generate a change report that shows account roles that have been changed/updated between a specific date/time range in the resource group of that subscription.

    az change-analysis list -g <resourceGroup> --start-time '07/15/2023' --end-time '07/26/2023'
    

    User's image

    This will list all the changes in the resourceGroup along with RBAC changes.

    Note: Changes will take time to reflect in the change-analysis extension in CLI.

    Hope this will help.

    Thanks,

    Shweta


    Please remember to "Accept Answer" if answer helped you.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful