FAQ: View role assignment changes for Azure AD

FAQ: View role assignment changes for Azure AD

Q. How can I view all role assignment changes over a period of time?

A. The PowerShell below will show all role assignment changes that have occured over the past 7 days. You can modify the time of the search by changing the PowerShell to the desired time range.

Get-AzureRMAuthorizationChangeLog -StartTime ([DateTime]::Now - [TimeSpan]::FromDays(7)) | FT Caller,Action,RoleName,PrincipalType,PrincipalName,ScopeType,ScopeName

Below is an example execution:

PS C:\> Get-AzureRMAuthorizationChangeLog -StartTime ([DateTime]::Now - [TimeSpan]::FromDays(7)) | FT Caller,Action,RoleName,PrincipalType,PrincipalName,ScopeType,ScopeName

Caller              Action  RoleName PrincipalType PrincipalName ScopeType    ScopeName
------              ------  -------- ------------- ------------- ---------    ---------
[email protected] Granted          User          James Bond    Subscription 466c1a...
[email protected] Revoked          User          James Bond    Subscription 466c1a...

 

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish