Azure / Azure/azure-powershell

Get-AzRoleDefinition -Name "[...]" should be able to return the complete Actions list, not solely "*"

Open
#8,977 3 comments 0 reactions 1 assignee Assigned to @darshanhs90 View on GitHub
act-identity-squad Authorization customer-reported feature-request needs-team-attention Service Attention
Dominant language
C#
Stars
4.8k
Forks
4.3k
Avg merge
2d 17h
Merged PRs (30d)
51

Description

When performing the following, users who may be Azure Administrators attempting to have fine-grained permissions/control of their users' experiences, should have **full visibility of the full list of Actions**, rather than simply receiving an asterisk ("*") for the list of role Actions, when performing:

Get-AzRoleDefinition -Name "Contributor" **-Verbose true**

Instead of returning "\*" for Actions -
{
"Name": "Contributor",
"Id": "b24988ac-6180-42a0-ab88-20f7382dd24c",
[...]
"Actions": ["\*"],
[...]
}

The Cmdlet should return the itemized list of Actions, when "**-Verbose true**" is added to the request, which could be [converted to Json and] piped to a file:
{
"Name": "Contributor",
"Id": "b24988ac-6180-42a0-ab88-20f7382dd24c",
[...]
"Actions": **[
"THE ENTIRE ITEMIZED LIST",
"OF APPLICABLE ACTIONS",
" SHOULD BE LISTED HERE",
"RATHER THAN '*'"
],**
[...]
}

**Assumption**: Large action lists, such as those that are part of the "Contributor" role, are the only ones that may abstract long Action lists into "*".

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.