Forum Discussion
danielmasters
Nov 07, 2022Copper Contributor
Retrieve List of Users with Access to Sentinel?
Hi all, I've been working on retrieving a list of users who have access to Sentinel. So far I've only found using Get-AzRoleAssignment to be fairly useful, but so far running it against every...
GBushey
Nov 07, 2022Former Employee
I would think you need to check the Resource Groups that contains the Log Analytics workspace as permissions could be granted at that level and not just at the subscription level.
danielmasters
Nov 08, 2022Copper Contributor
That's a good point. I'm using PIM as well, so turns out Get-AzRoleAssignment isn't the entire solution. It's a fairly involved task and not just "exporting users for Sentinel" as per requested by audit....