cusom roles for locks

This commit is contained in:
Jurjen Ladenius
2023-03-23 09:40:33 +01:00
parent 7a1cc5b4c2
commit 37987b50cf
11 changed files with 87 additions and 42 deletions

Binary file not shown.

View File

@@ -0,0 +1,6 @@
{
"ExpandedNodes": [
""
],
"PreviewInSolutionExplorer": false
}

BIN
.vs/slnx.sqlite Normal file

Binary file not shown.

View File

@@ -0,0 +1,14 @@
{
"Id": "f784dbe5-17a9-4d5b-a2d2-baec97b906dd",
"Name": "Resource Lock Administrator",
"Description": "Allows for reading, editing and deleting resource locks.",
"Actions": [
"Microsoft.Authorization/locks/*"
],
"NotActions": [],
"DataActions": [],
"NotDataActions": [],
"AssignableScopes": [
"/providers/Microsoft.Management/managementGroups/e9792fd7-4044-47e7-a40d-3fba46f1cd09"
]
}

View File

@@ -33,22 +33,23 @@
], ],
"NotDataActions": [], "NotDataActions": [],
"AssignableScopes": [ "AssignableScopes": [
"/subscriptions/a6b88b62-16fb-4507-9836-8f8da2bffa36",
"/subscriptions/840f4c89-ca32-496e-bcba-70a55951a4ef",
"/subscriptions/3190b0fd-4a66-4636-a204-5b9f18be78a6", "/subscriptions/3190b0fd-4a66-4636-a204-5b9f18be78a6",
"/subscriptions/30ce4e64-4299-4b93-91b8-4c953f63678e", "/subscriptions/30ce4e64-4299-4b93-91b8-4c953f63678e",
"/subscriptions/750d0421-da63-42fb-9f89-74aeb5dfe05b", "/subscriptions/750d0421-da63-42fb-9f89-74aeb5dfe05b",
"/subscriptions/0e4ba075-f7d9-4f31-860c-3cb8673f1f08", "/subscriptions/0e4ba075-f7d9-4f31-860c-3cb8673f1f08",
"/subscriptions/34c83aa8-6a8f-4c5e-9c27-0f1730d233bb",
"/subscriptions/5e1ac47a-0729-4546-b93f-469d92c5ac4a", "/subscriptions/5e1ac47a-0729-4546-b93f-469d92c5ac4a",
"/subscriptions/2372e452-d101-4fb1-b9ed-664b8cd68e40", "/subscriptions/2372e452-d101-4fb1-b9ed-664b8cd68e40",
"/subscriptions/23e654c9-ed9d-424e-b69a-6a0be116a3ce", "/subscriptions/23e654c9-ed9d-424e-b69a-6a0be116a3ce",
"/subscriptions/63cc34fe-1aea-4cef-8402-5869c9fff78b", "/subscriptions/63cc34fe-1aea-4cef-8402-5869c9fff78b",
"/subscriptions/80eaaecd-37af-4e15-9384-d5729b096740", "/subscriptions/80eaaecd-37af-4e15-9384-d5729b096740",
"/subscriptions/14c2354d-45a9-4e0f-98ff-be58cdbcddc7", "/subscriptions/14c2354d-45a9-4e0f-98ff-be58cdbcddc7",
"/subscriptions/b699f86e-e984-4c44-afa6-4a4e810d0df1",
"/subscriptions/86945e42-fa5a-4bbc-948f-3f5407f15d3e", "/subscriptions/86945e42-fa5a-4bbc-948f-3f5407f15d3e",
"/subscriptions/7cc36153-a8a4-4566-86bc-fec178ed176a", "/subscriptions/7cc36153-a8a4-4566-86bc-fec178ed176a",
"/subscriptions/e6daa42b-c939-4ef9-b384-c0cec82b7757", "/subscriptions/e6daa42b-c939-4ef9-b384-c0cec82b7757",
"/subscriptions/31b26889-ee10-480e-be6a-da5d8a58f19f", "/subscriptions/1ab2120c-947c-40e2-96c7-460d3e9659de",
"/subscriptions/ab77ee05-80f0-4d16-9be3-bc02a5f0455f",
"/subscriptions/0f35097b-19f1-4baf-b548-f31bc71eccea", "/subscriptions/0f35097b-19f1-4baf-b548-f31bc71eccea",
"/subscriptions/8c282de4-a7df-458e-b151-e10ca7b49966", "/subscriptions/8c282de4-a7df-458e-b151-e10ca7b49966",
"/subscriptions/0ecf52e9-a2b1-4938-b0b1-f7c1878de642", "/subscriptions/0ecf52e9-a2b1-4938-b0b1-f7c1878de642",
@@ -57,8 +58,11 @@
"/subscriptions/f9ab522b-4895-492d-b8a8-ca6e1f60c2a8", "/subscriptions/f9ab522b-4895-492d-b8a8-ca6e1f60c2a8",
"/subscriptions/6e2b45e4-5e7b-4628-8827-ec44e23d2f6b", "/subscriptions/6e2b45e4-5e7b-4628-8827-ec44e23d2f6b",
"/subscriptions/2c20594a-bb4e-4103-8e3c-017f6ca01431", "/subscriptions/2c20594a-bb4e-4103-8e3c-017f6ca01431",
"/subscriptions/a6b88b62-16fb-4507-9836-8f8da2bffa36",
"/subscriptions/840f4c89-ca32-496e-bcba-70a55951a4ef",
"/subscriptions/54794e27-b714-4346-81bc-05eae7ccb5a5", "/subscriptions/54794e27-b714-4346-81bc-05eae7ccb5a5",
"/subscriptions/2a07dfa7-69ee-4608-b2d5-14124fcccc31", "/subscriptions/2a07dfa7-69ee-4608-b2d5-14124fcccc31",
"/subscriptions/72631aea-35c9-4c93-97f9-91e7762a981b",
"/subscriptions/fced11a2-8ba7-4596-9ff4-de8b47713c48", "/subscriptions/fced11a2-8ba7-4596-9ff4-de8b47713c48",
"/subscriptions/7feeb150-9ee0-4aea-992a-5f3a89d933e6", "/subscriptions/7feeb150-9ee0-4aea-992a-5f3a89d933e6",
"/subscriptions/a134faf1-7a89-4f2c-8389-06d00bd5e2a7", "/subscriptions/a134faf1-7a89-4f2c-8389-06d00bd5e2a7",
@@ -66,6 +70,8 @@
"/subscriptions/5df09d5a-b1c1-48b8-b72c-ebe9b27e0e0c", "/subscriptions/5df09d5a-b1c1-48b8-b72c-ebe9b27e0e0c",
"/subscriptions/0c50e758-0cfb-4d35-9d52-b39ba918ce30", "/subscriptions/0c50e758-0cfb-4d35-9d52-b39ba918ce30",
"/subscriptions/baed3117-d2f3-4289-977d-6d4429d9e983", "/subscriptions/baed3117-d2f3-4289-977d-6d4429d9e983",
"/subscriptions/eec75831-812e-4b06-a7a4-ec28a5126238" "/subscriptions/eec75831-812e-4b06-a7a4-ec28a5126238",
"/subscriptions/c4b0c496-dbc1-483b-890b-fc46012125d8",
"/subscriptions/cea89b67-6bfd-47c6-b7fa-9b8006b664ea"
] ]
} }

View File

@@ -20,16 +20,19 @@
"/subscriptions/30ce4e64-4299-4b93-91b8-4c953f63678e", "/subscriptions/30ce4e64-4299-4b93-91b8-4c953f63678e",
"/subscriptions/750d0421-da63-42fb-9f89-74aeb5dfe05b", "/subscriptions/750d0421-da63-42fb-9f89-74aeb5dfe05b",
"/subscriptions/0e4ba075-f7d9-4f31-860c-3cb8673f1f08", "/subscriptions/0e4ba075-f7d9-4f31-860c-3cb8673f1f08",
"/subscriptions/34c83aa8-6a8f-4c5e-9c27-0f1730d233bb",
"/subscriptions/5e1ac47a-0729-4546-b93f-469d92c5ac4a", "/subscriptions/5e1ac47a-0729-4546-b93f-469d92c5ac4a",
"/subscriptions/2372e452-d101-4fb1-b9ed-664b8cd68e40", "/subscriptions/2372e452-d101-4fb1-b9ed-664b8cd68e40",
"/subscriptions/23e654c9-ed9d-424e-b69a-6a0be116a3ce", "/subscriptions/23e654c9-ed9d-424e-b69a-6a0be116a3ce",
"/subscriptions/63cc34fe-1aea-4cef-8402-5869c9fff78b", "/subscriptions/63cc34fe-1aea-4cef-8402-5869c9fff78b",
"/subscriptions/80eaaecd-37af-4e15-9384-d5729b096740", "/subscriptions/80eaaecd-37af-4e15-9384-d5729b096740",
"/subscriptions/14c2354d-45a9-4e0f-98ff-be58cdbcddc7", "/subscriptions/14c2354d-45a9-4e0f-98ff-be58cdbcddc7",
"/subscriptions/b699f86e-e984-4c44-afa6-4a4e810d0df1",
"/subscriptions/86945e42-fa5a-4bbc-948f-3f5407f15d3e", "/subscriptions/86945e42-fa5a-4bbc-948f-3f5407f15d3e",
"/subscriptions/7cc36153-a8a4-4566-86bc-fec178ed176a", "/subscriptions/7cc36153-a8a4-4566-86bc-fec178ed176a",
"/subscriptions/e6daa42b-c939-4ef9-b384-c0cec82b7757", "/subscriptions/e6daa42b-c939-4ef9-b384-c0cec82b7757",
"/subscriptions/31b26889-ee10-480e-be6a-da5d8a58f19f", "/subscriptions/1ab2120c-947c-40e2-96c7-460d3e9659de",
"/subscriptions/ab77ee05-80f0-4d16-9be3-bc02a5f0455f",
"/subscriptions/0f35097b-19f1-4baf-b548-f31bc71eccea", "/subscriptions/0f35097b-19f1-4baf-b548-f31bc71eccea",
"/subscriptions/8c282de4-a7df-458e-b151-e10ca7b49966", "/subscriptions/8c282de4-a7df-458e-b151-e10ca7b49966",
"/subscriptions/0ecf52e9-a2b1-4938-b0b1-f7c1878de642", "/subscriptions/0ecf52e9-a2b1-4938-b0b1-f7c1878de642",
@@ -38,8 +41,11 @@
"/subscriptions/f9ab522b-4895-492d-b8a8-ca6e1f60c2a8", "/subscriptions/f9ab522b-4895-492d-b8a8-ca6e1f60c2a8",
"/subscriptions/6e2b45e4-5e7b-4628-8827-ec44e23d2f6b", "/subscriptions/6e2b45e4-5e7b-4628-8827-ec44e23d2f6b",
"/subscriptions/2c20594a-bb4e-4103-8e3c-017f6ca01431", "/subscriptions/2c20594a-bb4e-4103-8e3c-017f6ca01431",
"/subscriptions/a6b88b62-16fb-4507-9836-8f8da2bffa36",
"/subscriptions/840f4c89-ca32-496e-bcba-70a55951a4ef",
"/subscriptions/54794e27-b714-4346-81bc-05eae7ccb5a5", "/subscriptions/54794e27-b714-4346-81bc-05eae7ccb5a5",
"/subscriptions/2a07dfa7-69ee-4608-b2d5-14124fcccc31", "/subscriptions/2a07dfa7-69ee-4608-b2d5-14124fcccc31",
"/subscriptions/72631aea-35c9-4c93-97f9-91e7762a981b",
"/subscriptions/fced11a2-8ba7-4596-9ff4-de8b47713c48", "/subscriptions/fced11a2-8ba7-4596-9ff4-de8b47713c48",
"/subscriptions/7feeb150-9ee0-4aea-992a-5f3a89d933e6", "/subscriptions/7feeb150-9ee0-4aea-992a-5f3a89d933e6",
"/subscriptions/a134faf1-7a89-4f2c-8389-06d00bd5e2a7", "/subscriptions/a134faf1-7a89-4f2c-8389-06d00bd5e2a7",
@@ -47,6 +53,8 @@
"/subscriptions/5df09d5a-b1c1-48b8-b72c-ebe9b27e0e0c", "/subscriptions/5df09d5a-b1c1-48b8-b72c-ebe9b27e0e0c",
"/subscriptions/0c50e758-0cfb-4d35-9d52-b39ba918ce30", "/subscriptions/0c50e758-0cfb-4d35-9d52-b39ba918ce30",
"/subscriptions/baed3117-d2f3-4289-977d-6d4429d9e983", "/subscriptions/baed3117-d2f3-4289-977d-6d4429d9e983",
"/subscriptions/eec75831-812e-4b06-a7a4-ec28a5126238" "/subscriptions/eec75831-812e-4b06-a7a4-ec28a5126238",
"/subscriptions/c4b0c496-dbc1-483b-890b-fc46012125d8",
"/subscriptions/cea89b67-6bfd-47c6-b7fa-9b8006b664ea"
] ]
} }

View File

@@ -16,6 +16,8 @@ class ResourceCheck {
[string] $Tag_Data = "" [string] $Tag_Data = ""
[string] $Tag_Delete = "" [string] $Tag_Delete = ""
[string] $Tag_Split = "" [string] $Tag_Split = ""
[string] $Tag_CreatedOnDate = ""
[string] $Tag_Deployment = ""
} }
Write-Host "========================================================================================================================================================================" Write-Host "========================================================================================================================================================================"
@@ -24,7 +26,7 @@ Write-Host "====================================================================
$subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled" $subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
$fileName = "c:\temp\2022-07-29 azure_resources.csv" $fileName = "c:\temp\2023-03-08 azure_resources.csv"
#rm $fileName #rm $fileName
foreach ($subscription in $subscriptions) foreach ($subscription in $subscriptions)
@@ -52,7 +54,8 @@ Set-AzContext -SubscriptionId $subscription.Id
$resourceCheck.Tag_Data = $resource.Tags.data $resourceCheck.Tag_Data = $resource.Tags.data
$resourceCheck.Tag_Delete = $resource.Tags.delete $resourceCheck.Tag_Delete = $resource.Tags.delete
$resourceCheck.Tag_Split = $resource.Tags.split $resourceCheck.Tag_Split = $resource.Tags.split
$resourceCheck.Tag_CreatedOnDate = $resource.Tags.CreatedOnDate
$resourceCheck.Tag_Deployment = $resource.Tags.drp_deployment
$Result += $resourceCheck $Result += $resourceCheck
} }

View File

@@ -29,8 +29,8 @@ Write-Host "====================================================================
$subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled" $subscriptions = Get-AzSubscription | Where-Object State -eq "Enabled"
$fileName = "c:\temp\2022-08-04 azure_webapps.csv" $fileName = "c:\temp\2023-03-15 azure_webapps.csv"
rm $fileName # rm $fileName
foreach ($subscription in $subscriptions) foreach ($subscription in $subscriptions)
{ {

View File

@@ -1,3 +1,11 @@
#Get-AzRoleDefinition 'Storage Data Contributor' | ConvertTo-Json #Get-AzRoleDefinition 'Storage Data Contributor' | ConvertTo-Json
Set-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Cloud Engineering\Custom roles\Storage Data Contributor.json'
$fileName = "c:\temp\subscriptions.csv"
Get-AzSubscription | Export-Csv -Path $fileName -NoTypeInformation
Set-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Storage Data Contributor.json'
Set-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Storage Data Reader.json'
New-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Resource Lock Administrator.json'