Forum Discussion

AlphaBetaGamma's avatar
AlphaBetaGamma
Brass Contributor
Dec 21, 2020
Solved

Power shell script which shows list of RBAC role, Azure resource and Username

Hi,

 

Can anyone please help me with a powershell script which shows list consisting of RBAC role, Azure resource & username to whom it is allocated to? 

 

  • ChrisBradshaw's avatar
    ChrisBradshaw
    Dec 22, 2020

    AlphaBetaGamma Thanks- that makes sense.

    The following script should do something like that, by looping through the resources and then a nested loop through the role assignments. I've included the "Display Name" field as well in case you have any roles assigned to groups- they just have a blank entry for "SignInName".

     

    foreach ($Resource in Get-AzResource) {
     $RoleAssignments=Get-AZRoleAssignment -ResourceGroupName $Resource.ResourceGroupName -ResourceName $Resource.Name -ResourceType $resource.type
     ForEach ($RoleAssignment in $RoleAssignments){
       $Resource | Select-Object @{Name="Azure Resource name";Expression={$Resource.Name}},
         @{Name="SignInName";Expression={$RoleAssignment.SignInName}},
         @{Name="DisplayName";Expression={$RoleAssignment.DisplayName}},
         @{Name="RoleDefinitionName";Expression={$RoleAssignment.RoleDefinitionName}}
     }
    }

     

  • AlphaBetaGamma How about this, using the  Get-AzRoleAssignment cmdlet:

     

    Get-AzRoleAssignment | Select-Object RoleDefinitionName, Scope , DisplayName

     

     

    Output will look something like this

     

    RoleDefinitionName  Scope                                                     DisplayName
    ------------------  -----                                                     -----------
    Contributor         /subscriptions/(guid)/resourcegroups/myresourcegroup      Bob
    Reader              /subscriptions/(guid)/resourcegroups/myresourcegroup/myvm Jim
    Contributor         /subscriptions/(guid)/resourcegroups/myresourcegroup/myvm Sal

     

    • AlphaBetaGamma's avatar
      AlphaBetaGamma
      Brass Contributor

      Thanks for your response, Yeah, i have tried this. But I was trying to get exact resource name against each RABC role and the username. ChrisBradshaw 

      • ChrisBradshaw's avatar
        ChrisBradshaw
        Iron Contributor

        AlphaBetaGamma - would you be able to write out some sample (made up) output so I can get a better idea of what you're looking for?

Resources