jurjen.ladenius/Cloud-20Engineering
1
0
Fork 0
mirror of https://dev.azure.com/effectory/Survey%20Software/_git/Cloud%20Engineering synced 2026-02-27 18:52:18 +01:00
Code Issues Packages Projects Releases Wiki Activity

PIM settings script #99024

Browse Source 
Script for management group overview #97859
This commit is contained in:
Jurjen Ladenius
2024-04-18 09:00:04 +02:00
parent c91b0f0908
commit 5003d32cad
8 changed files with 378 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
Powershell/Tools/Custom Roles.ps1 Normal file
View File

@@ -0,0 +1,41 @@
#Get-AzRoleDefinition 'Storage Data Contributor' | ConvertTo-Json
$fileName = "c:\temp\subscriptions.csv"
Get-AzSubscription | Export-Csv -Path $fileName -NoTypeInformation
Set-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Storage Data Contributor.json'
Set-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Storage Data Reader.json'
New-AzRoleDefinition -InputFile 'C:\Repository\Cloud Engineering\Custom roles\Resource Lock Administrator.json'
#https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac#built-in-role-definitions
# jimmy.van.den.berg@effectory.com "99dbd99f-9165-46a3-94d7-d8467121f0d1"
$subscriptionId = "2161debe-6042-4633-b10e-de77c06cabc6" ; $resourceGroupName = "phasedrelease"; $accountName = "phasedrelease"; $principalIdReader = "b0773fcc-378b-415a-9f33-b5c2d51b37f6"; $principalIdWriter = "c9c9389d-02df-40ab-b939-3e26736c6a87"
$subscriptionId = "3190b0fd-4a66-4636-a204-5b9f18be78a6" ; $resourceGroupName = "authorization"; $accountName = "authorizationeff"; $principalIdReader = "bd8fb398-a065-46f9-a486-1178dce979c3"; $principalIdWriter = "69bea414-ff10-40de-87c3-65b1903e9b68"
$subscriptionId = "86945e42-fa5a-4bbc-948f-3f5407f15d3e" ; $resourceGroupName = "hierarchy"; $accountName = "hierarchyeff"; $principalIdReader = "dd576450-b564-4659-ac00-163036bf1dff"; $principalIdWriter = "591b32ff-33b8-4839-bf35-58ec262b014f"
$subscriptionId = "f9ab522b-4895-492d-b8a8-ca6e1f60c2a8" ; $resourceGroupName = "participant-exchange"; $accountName = "participantexchange"; $principalIdReader = "3b3ebcdf-04b6-4cf8-a237-425cc3952770"; $principalIdWriter = "6c38e6fb-4190-45bc-a347-b132afb47cba"
$subscriptionId = "7feeb150-9ee0-4aea-992a-5f3a89d933e6" ; $resourceGroupName = "results-calculation"; $accountName = "results-calculation"; $principalIdReader = "645b069a-c367-4e0e-9dac-38595663acab"; $principalIdWriter = "fa86c1a4-570c-4f00-8960-1a17eb23d613"
$subscriptionId = "7feeb150-9ee0-4aea-992a-5f3a89d933e6" ; $resourceGroupName = "results-calculation"; $accountName = "results-calculation-stage"; $principalIdReader = "645b069a-c367-4e0e-9dac-38595663acab"; $principalIdWriter = "fa86c1a4-570c-4f00-8960-1a17eb23d613"
set-azcontext -SubscriptionId $subscriptionId
New-AzCosmosDBSqlRoleAssignment -AccountName $accountName -PrincipalId $principalIdReader -ResourceGroupName $resourceGroupName -RoleDefinitionName "Cosmos DB Built-in Data Reader" `
-Scope "/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/$accountName"
New-AzCosmosDBSqlRoleAssignment -AccountName $accountName -PrincipalId $principalIdWriter -ResourceGroupName $resourceGroupName -RoleDefinitionName "Cosmos DB Built-in Data Contributor" `
-Scope "/subscriptions/$subscriptionId/resourceGroups/$resourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/$accountName"
#Get-AzCosmosDBSqlRoleAssignment -AccountName $accountName -ResourceGroupName $resourceGroupName | Where PrincipalId -eq $principalIdReader
#Get-AzCosmosDBSqlRoleAssignment -AccountName $accountName -ResourceGroupName $resourceGroupName | Where PrincipalId -eq $principalIdWriter
# Remove-AzCosmosDBSqlRoleAssignment -AccountName $accountName -Id "/subscriptions/2161debe-6042-4633-b10e-de77c06cabc6/resourceGroups/phasedrelease/providers/Microsoft.DocumentDB/databaseAccounts/phasedrelease/sqlRoleAssignments/0991d31e-323d-4312-b328-92d75cbe0166" -ResourceGroupName $resourceGroupName