Get‐PIMAzureResourcePolicy

Description:

Return the rules of the rolename at the specified subscription/scope

Samples:

🔷 Get configuration of the role "Webmaster" at a subscription scope

Get-PIMAzureResourcePolicy -TenantID <tenantID> -SubscriptionId <subscriptionID> -rolename "webmaster"

🔷 Get Contributor and Owner role config at a Resource Group scope

$scope = "subscriptions/eedcaa84-3756-4da9-bf87-40068c3dd2a2/resourceGroups/RG-FR-ADDS"
Get-PIMAzureResourcePolicy -tenantID $tenantID -scope $scope -rolename "owner","contributor"

Parameters:

Parameter	description
$TenantID	Entra ID TenantID
$SubscriptionId	Subscription ID
$SubscriptionId	If you want to manage the role at other scope than subscription
$rolename	name of the roles to update/export ex -rolename "webmaster","contributor"

Screenshot