Az.Resources

Adds an API permission.

Adds member to group.

Lists key credentials and password credentials for an application.

Get federatedIdentityCredentials by Id from applications.

Lists entities from applications or get entity from applications by key

Lists API permissions the application has requested.

Lists entities from groups or get entity from groups by key

Lists members from group.

The owners of the group. Limited to 100 owners. Nullable. If this property is not specified when creating a Microsoft 365 group, the calling user is automatically assigned as the group owner. Supports $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1). Supports $expand including nested $select. For example, /groups?$filter=startsWith(displayName,'Role')&$select=id,displayName&$expand=owners($select=id,userPrincipalName,displayName).

Retrieve a list of organization objects.

Lists entities from service principals or get entity from service principals by key

Get appRoleAssignments from servicePrincipals

Lists key credentials and password credentials for an service principal.

Lists entities from users or get entity from users by key

Creates key credentials or password credentials for an application.

Create federatedIdentityCredential for applications.

Adds new entity to applications

Adds new entity to groups

Create new navigation property ref to owners for groups

Adds new entity to servicePrincipals

Create new navigation property to appRoleAssignments for servicePrincipals

Creates key credentials or password credentials for an service principal.

Adds new entity to users

Removes key credentials or password credentials for an application.

Delete navigation property federatedIdentityCredentials for applications

Deletes entity from applications

Removes an API permission.

Deletes entity from groups.

Deletes member from group Users, contacts, and groups that are members of this group. HTTP Methods: GET (supported for all groups), POST (supported for security groups and mail-enabled security groups), DELETE (supported only for security groups) Read-only. Nullable. Supports $expand.

Delete ref of navigation property owners for groups

Deletes entity from service principal.

Delete navigation property appRoleAssignments for servicePrincipals

Removes key credentials or password credentials for an service principal.

Deletes entity from users.

Update the navigation property federatedIdentityCredentials in applications

Updates entity in applications

Update entity in groups

Updates entity in service principal

Update the navigation property appRoleAssignments in servicePrincipals

Updates entity in users

Gets managed applications

Gets managed application definitions

Creates an Azure managed application.

Creates a managed application definition.

Removes a managed application

Removes a managed application definition

Updates managed application

Updates managed application definition

Get-AzPolicyAlias retrieves and outputs Azure provider resource types that have aliases defined and match the given parameter values. If no parameters are provided, all provider resource types that contain an alias will be output. The -ListAvailable switch modifies this behavior by listing all matching resource types including those without aliases.

Gets policy assignments.

Gets policy set definitions.

Gets policy exemptions.

Gets policy set definitions.

Get the specified role management policy for a resource scope

Get the specified role management policy assignment for a resource scope

Creates or updates a policy assignment.

Creates or updates a policy definition.

Creates or updates a policy exemption.

Creates or updates a policy set definition.

Create a role management policy assignment

This operation deletes a policy assignment, given its name and the scope it was created in. The scope of a policy assignment is the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'.

This operation deletes the policy definition in the given subscription with the given name.

This operation deletes a policy exemption, given its name and the scope it was created in. The scope of a policy exemption is the part of its ID preceding '/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}'.

This operation deletes the policy definition in the given subscription with the given name.

Delete a role management policy

Delete a role management policy assignment

This operation updates a policy assignment with the given scope and name. Policy assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.

This operation updates an existing policy definition in the given subscription or management group with the given name.

This operation updates a policy exemption with the given scope and name.

This operation updates an existing policy set definition in the given subscription or management group with the given name.

Update a role management policy

Captures a resource group as a template and saves it to a file.

Exports a Template Spec to the local filesystem

Lists Azure RBAC deny assignments at the specified scope. By default it lists all deny assignments in the selected Azure subscription. Use respective parameters to list deny assignments to a specific user, or to list deny assignments on a specific resource group or resource.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Get deployment

Get deployment operation

Gets or lists deployment scripts.

Gets the log of a deployment script execution.

Gets a template What-If result for a deployment at subscription scope.

Gets all locations and the supported resource providers for each location.

Gets Management Group(s)

Get deployment at a management group

Get deployment operation for management group deployment

Gets Management Group scoped Deployment Stacks.

Gets a template What-If result for a deployment at management group scope.

Lists all Entities under the current Tenant

Gets the Hierarchy Settings under the current tenant

Checks if the Management Group name is available in the Tenant and a valid name.

Gets the details of Subscription(s) under a Management Group.

Gets all the Azure Resource Management Private Link Association(s).

Gets information about Azure provider features.

Gets the operations for an Azure resource provider that are securable using Azure RBAC.

Gets a feature registration in your account.

Gets resources.

Gets resource groups.

Gets the deployments in a resource group.

Gets the resource group deployment operation

Gets Resource Group scoped Deployment Stacks.

Gets a template What-If result for a deployment at resource group scope.

Gets a resource lock.

Gets Azure Resource Management Private Link(s)

Gets a resource provider.

Lists Azure RBAC role assignments at the specified scope. By default it lists all role assignments in the selected Azure subscription. Use respective parameters to list assignments to a specific user, or to list assignments on a specific resource group or resource.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Please notice that this cmdlet will mark ObjectType as Unknown in output if the object of role assignment is not found or current account has insufficient privileges to get object type.

Get the specified role assignment schedule for a resource scope

Gets the specified role assignment schedule instance.

Get the specified role assignment schedule request.

Lists all Azure RBAC roles that are available for assignment.

Get the specified role eligibility schedule for a resource scope

Gets the specified role eligibility schedule instance.

Get the specified role eligibility schedule request.

Get the child resources of a resource on which user has eligible access

Gets Subscription scoped Deployment Stacks.

Gets predefined Azure tags | Gets the entire set of tags on a resource or subscription.

Gets or lists Template Specs

Get the current Tenant Backfill Subscription Status

Get deployment at tenant scope

Get deployment operation for deployment at tenant scope

Gets a template What-If result for a deployment at tenant scope.

Invokes an action on a resource.

Moves a resource to a different resource group or subscription.

Create a deployment at the current subscription scope.

Creates a Management Group

Create a deployment at a management group

Creates a new Management Group scoped Deployment Stack.

Creates Hierarchy Settings under the current tenant

Adds a Subscription to a Management Group.

Creates the Azure Resource Management Private Link Association.

Creates a resource.

Creates an Azure resource group.

Adds an Azure deployment to a resource group.

Creates a new Resource Group scoped Deployment Stack.

Creates a resource lock.

Create Azure Resource Management Private Link

Assigns the specified RBAC role to the specified principal, at the specified scope.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}

Please notice that this cmdlet will mark ObjectType as Unknown in output if the object of role assignment is not found or current account has insufficient privileges to get object type.

Creates a role assignment schedule request.

Creates a custom role in Azure RBAC. Provide either a JSON role definition file or a PSRoleDefinition object as input. First, use the Get-AzRoleDefinition command to generate a baseline role definition object. Then, modify its properties as required. Finally, use this command to create a custom role using role definition.

Creates a role eligibility schedule request.

Creates a new Subscription scoped Deployment Stack.

Creates a predefined Azure tag or adds values to an existing tag | Creates or updates the entire set of tags on a resource or subscription.

Creates a new Template Spec.

Create a deployment at tenant scope

Publishes a Bicep file to a registry.

Registers an Azure provider feature in your current subscription context.

Creates a feature registration in your account.

Registers a resource provider.

Removes a deployment and any associated operations

Removes a deployment script and its associated resources.

Removes a Management Group

Removes a deployment at a management group and any associated operations

Removes a Management Group scoped Deployment Stack.

Deletes all Hierarchy Settings under the current tenant

Removes a Subscription from a Management Group.

Delete a specific azure private link association.

Removes a resource.

Removes a resource group.

Removes a resource group deployment and any associated operations.

Removes a Resource Group scoped Deployment Stack.

Removes a resource lock.

Deletes the Resource Manangement Private Link.

Removes a role assignment to the specified principal who is assigned to a particular role at a particular scope.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Please notice that this cmdlet will mark ObjectType as Unknown in output if the object of role assignment is not found or current account has insufficient privileges to get object type.

Deletes a custom role in Azure RBAC. The role to be deleted is specified using the Id property of the role. Delete will fail if there are existing role assignments made to the custom role.

Removes a Subscription scoped Deployment Stack.

Deletes predefined Azure tags or values | Deletes the entire set of tags on a resource or subscription.

Removes a Template Spec

Removes a deployment at tenant scope and any associated operations

Saves the log of a deployment script execution to disk.

Saves a deployment template to a file.

Saves a Management Group scoped Deployment Stack Template.

Saves a deployment template to a file.

Saves a Resource Group scoped Deployment Stack Template.

Saves a resource group deployment template to a file.

Saves a Subscription scoped Deployment Stack Template.

Saves a deployment template to a file.

Sets a new Management Group scoped Deployment Stack.

Modifies a resource.

Modifies a resource group.

Sets a new Resource Group scoped Deployment Stack.

Modifies a resource lock.

Update an existing Role Assignment.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Please notice that this cmdlet will mark ObjectType as Unknown in output if the object of role assignment is not found or current account has insufficient privileges to get object type.

Modifies a custom role in Azure RBAC. Provide the modified role definition either as a JSON file or as a PSRoleDefinition. First, use the Get-AzRoleDefinition command to retrieve the custom role that you wish to modify. Then, modify the properties that you wish to change. Finally, save the role definition using this command.

Sets a new Subscription scoped Deployment Stack.

Modifies a Template Spec.

Starts backfilling subscriptions for the current Tenant

Cancel a running deployment

Cancel a running deployment at a management group

Cancels a resource group deployment.

Cancels a pending role assignment schedule request.

Cancels a pending role eligibility schedule request.

Cancel a running deployment at tenant scope

Validates a deployment.

Validates a deployment at a management group.

Validates a resource group deployment.

Validates a deployment at tenant scope.

Unregisters an Azure provider feature in your account.

Removes a feature registration from your account.

Unregisters a resource provider.

Updates a Management Group

Updates Hierarchy Settings under the current tenant

Selectively updates the set of tags on a resource or subscription.