Azure / Azure/azure-powershell
Get-AzRoleDefinition -Name "[...]" should be able to return the complete Actions list, not solely "*"
- Dominant language
- C#
- Stars
- 4.8k
- Forks
- 4.3k
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 51
Description
When performing the following, users who may be Azure Administrators attempting to have fine-grained permissions/control of their users' experiences, should have **full visibility of the full list of Actions**, rather than simply receiving an asterisk ("*") for the list of role Actions, when performing:
Get-AzRoleDefinition -Name "Contributor" **-Verbose true**
Instead of returning "\*" for Actions -
{
"Name": "Contributor",
"Id": "b24988ac-6180-42a0-ab88-20f7382dd24c",
[...]
"Actions": ["\*"],
[...]
}
The Cmdlet should return the itemized list of Actions, when "**-Verbose true**" is added to the request, which could be [converted to Json and] piped to a file:
{
"Name": "Contributor",
"Id": "b24988ac-6180-42a0-ab88-20f7382dd24c",
[...]
"Actions": **[
"THE ENTIRE ITEMIZED LIST",
"OF APPLICABLE ACTIONS",
" SHOULD BE LISTED HERE",
"RATHER THAN '*'"
],**
[...]
}
**Assumption**: Large action lists, such as those that are part of the "Contributor" role, are the only ones that may abstract long Action lists into "*".
Contributor guide
Assessment
This issue has not been assessed yet.