Skip to content

Instantly share code, notes, and snippets.

@joaocc
Created November 11, 2021 17:46
Show Gist options
  • Save joaocc/a053ec3292ab8edcc42e9cdb38e141d4 to your computer and use it in GitHub Desktop.
Save joaocc/a053ec3292ab8edcc42e9cdb38e141d4 to your computer and use it in GitHub Desktop.
AzureAD - list AAD role assignments
# https://arindamhazra.com/list-azure-ad-roles-and-role-assignments/
Connect-AzureAD
$allAZADUserWithRoleMapping = @()
# Get all Azure AD roles and loop through members of those roles
# Add user/service principal details in psObject array
Get-AzureADDirectoryRoleTemplate | ForEach-Object{
$roleName = $_.DisplayName
Get-AzureADDirectoryRole | Where-Object {$_.displayName -eq $roleName} | ForEach-Object{
Get-AzureADDirectoryRoleMember -ObjectId $_.ObjectId | ForEach-Object{
$extProp = $_.ExtensionProperty
$objUser = New-Object psObject
$objUser | Add-Member RoleName $roleName
$objUser | Add-Member UserName $_.DisplayName
$objUser | Add-Member JobTitle $_.JobTitle
$objUser | Add-Member EMail $_.Mail
$objUser | Add-Member AccountEnabled $_.AccountEnabled
$objUser | Add-Member Department $_.Department
$objUser | Add-Member ObjectType $_.ObjectType
$objUser | Add-Member CreationDate $extProp.createdDateTime
$objUser | Add-Member EmployeeId $extProp.employeeId
$allAZADUserWithRoleMapping += $objUser
}
}
}
$allAZADUserWithRoleMapping | Export-CSV -Path $oFile -NoClobber -NoTypeInformation -Confirm:$false -Force
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment