Added Azure Roles.

This commit is contained in:
mgeeky 2022-01-25 12:59:19 +01:00
parent 316296e5bf
commit b7450f1900
2 changed files with 5 additions and 5410 deletions

View File

@ -1,14 +1,3 @@
#
# This script collects Azure RBAC and Azure AD Roles, their definitions and associated permissions.
# Then lists them in a nice Markdown report.
#
# Usage:
# PS C:\> powershell -c '. .\Dump-AzureRoles.ps1 ; Dump-AzureRoles' | Out-File roles.md
#
# mgeeky / Mariusz Banach, '22
# <mb [at] binary-offensive.com
#
Function Get-ARTADRolePermissions { Function Get-ARTADRolePermissions {
<# <#
.SYNOPSIS .SYNOPSIS
@ -163,10 +152,9 @@ Second part contains full definitions of each role along with their permissions
| # | RoleName | RoleDescription | RoleId | | # | RoleName | RoleDescription | RoleId |
|---|----------|-----------------|--------| |---|----------|-----------------|--------|
"@ "@
$azureRbacRoles = Get-AzRoleDefinition | ? { $_.IsCustom -eq $false } | sort -property displayname $azureRbacRoles = Get-AzRoleDefinition | ? { $_.IsCustom -eq $false } | sort -property Name
$count = 0 $count = 0
$azureRbacRoles | % { $azureRbacRoles | % {
@ -196,11 +184,11 @@ Second part contains full definitions of each role along with their permissions
--- ---
## Role Definitions ## Role Permissions
This section contains detailed definitions of each role along with their assigned permissions sets. This section contains detailed definitions of each role along with their assigned permissions sets.
### Azure RBAC Role Definitions ### Azure RBAC Role Permissions
"@ "@
@ -212,11 +200,11 @@ This section contains detailed definitions of each role along with their assigne
--- ---
### Azure AD Role Definitions ### Azure AD Role Permissions
"@ "@
$azureADRoles | % { $azureADRoles | % {
Get-ARTADRolePermissions -RoleName $_.DisplayName Get-ARTADRolePermissions -RoleName $_.DisplayName
} }
} }

File diff suppressed because it is too large Load Diff