@ShashiShailaj-MSFT thanks for the comments. I have ran Get-AzureADMSRoleAssignment -Filter "principalId eq '[object id of the user]'" | fl - but it only shows Active Role Assignments. But not Eligible role assignments, anyway to get them details. Even If I have to run sperate commands.
Exporting Permissing from Azure Group
Hi, is there a Powershell script to export permissions from a list of groups I have in an CSV. I was looking at getting the following highlighted information in screenshot. I can't seem to a find an easy way of exporting the information, without going into each group/
There is no straightforward way to do this as far as I can think . A script would need to be written with the logic of first traversing the Azure AD level roles and then the Azure subscription level roles that the user may have. This also will only work for the subscriptions that are currently associated with the current tenant only . The following cmdlets for both the scenarios.
Azure AD assigned Roles :- Get-AzRoleAssignment -SignInName isabella@ssss .com | FL DisplayName, RoleDefinitionName, Scope
Azure Role assignments :- Get-AzureADMSRoleAssignment -Filter "principalId eq '[object id of the user]'" | fl
Sign in to comment
Sort by: Most helpful