Skip to content

[BULK] [Bundle-Security] - Scheduled execution to fix known issues (part 28) #4054

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mikefrobbins merged 1 commit into from
Apr 6, 2026
Merged

[BULK] [Bundle-Security] - Scheduled execution to fix known issues (part 28) #4054

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions azps-15.4.0/Az.Resources/Remove-AzADAppPermission.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,10 +33,10 @@ Removes an API permission.

### Example 1: Remove API Permission
```powershell
Remove-AzADAppPermission -ObjectId 9cc74d5e-1162-4b90-8696-65f3d6a3f7d0 -PermissionId 5f8c59db-677d-491f-a6b8-5f174b11ec1d
Remove-AzADAppPermission -ObjectId aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb -PermissionId 5f8c59db-677d-491f-a6b8-5f174b11ec1d
```

Remove delegated permission "Group.Read.All" of Microsoft Graph API from AD Application (9cc74d5e-1162-4b90-8696-65f3d6a3f7d0)
Remove delegated permission "Group.Read.All" of Microsoft Graph API from AD Application (aaaabbbb-0000-cccc-1111-dddd2222eeee)

## PARAMETERS

Expand Down
2 changes: 1 addition & 1 deletion azps-15.4.0/Az.Resources/Remove-AzADServicePrincipalAppRoleAssignment.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ Delete navigation property appRoleAssignments for servicePrincipals

### Example 1: Remove an app role from service principal
```powershell
Remove-AzADServicePrincipalAppRoleAssignment -AppRoleAssignmentId Zbm-cUeDXUmlicIc3eenIlTWN1A5UVFMigS0D3ED-dk -ServicePrincipalId 71beb965-8347-495d-a589-c21cdde7a722
Remove-AzADServicePrincipalAppRoleAssignment -AppRoleAssignmentId Zbm-cUeDXUmlicIc3eenIlTWN1A5UVFMigS0D3ED-dk -ServicePrincipalId aaaaaaaa-bbbb-cccc-1111-222222222222
```

Remove an app role from service principal.
Expand Down
2 changes: 1 addition & 1 deletion azps-15.4.0/Az.Resources/Remove-AzManagementGroupSubscription.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ The **Remove-AzManagementGroupSubscription** cmdlet removes a Subscription from

### Example 1: Remove Subscription from a Management Group
```powershell
Remove-AzManagementGroupSubscription -GroupName "TestGroup" -SubscriptionId 2120692d-35c3-44c8-81f5-631fa7351726
Remove-AzManagementGroupSubscription -GroupName "TestGroup" -SubscriptionId aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e
```

## PARAMETERS
Expand Down
2 changes: 1 addition & 1 deletion azps-15.4.0/Az.Resources/Remove-AzRoleAssignment.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -139,7 +139,7 @@ Removes a role assignment for john.doe@contoso.com who is assigned to the Reader

### Example 2
```powershell
Remove-AzRoleAssignment -ObjectId 00001111-aaaa-2222-bbbb-3333cccc4444 -RoleDefinitionName Reader
Remove-AzRoleAssignment -ObjectId aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb -RoleDefinitionName Reader
```

Removes the role assignment to the group principal identified by the ObjectId and assigned to the Reader role.
Expand Down
6 changes: 3 additions & 3 deletions azps-15.4.0/Az.Resources/Set-AzRoleAssignment.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ $ConditionVersion = "2.0"
$Description = "This is a new role assignment for John"
$Condition = "@Resource[Microsoft.Storage/storageAccounts/blobServices/containers/blobs:Path] StringEqualsIgnoreCase 'foo_storage_container'"

$roleAssignment = Get-AzRoleAssignment -Scope "/subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/contoso_rg" -PrincipalId "0c0f6cdc-90dd-4664-83c0-a0d986c4c604"
$roleAssignment = Get-AzRoleAssignment -Scope "/subscriptions/00001111-aaaa-2222-bbbb-3333cccc4444/resourceGroups/contoso_rg" -PrincipalId "aaaaaaaa-bbbb-cccc-1111-222222222222"
$roleAssignment.Description = $Description
$roleAssignment.Condition = $Condition
$roleAssignment.ConditionVersion = $ConditionVersion
Expand All @@ -69,7 +69,7 @@ RoleAssignmentId : /providers/Microsoft.Management/managementGroups/1273adef-0
SignInName : John.Doe@Contoso.com
RoleDefinitionName : Owner
RoleDefinitionId : 8e3af657-a8ff-443c-a75c-2fe8c4bcb635
ObjectId : 0c0f6cdc-90dd-4664-83c0-a0d986c4c604
ObjectId : aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb
ObjectType : User
CanDelegate : False
Description : This is a new role assignment for John
Expand All @@ -93,7 +93,7 @@ RoleAssignmentId : /providers/Microsoft.Management/managementGroups/1273adef-0
SignInName : John.Doe@Contoso.com
RoleDefinitionName : Owner
RoleDefinitionId : 8e3af657-a8ff-443c-a75c-2fe8c4bcb635
ObjectId : 0c0f6cdc-90dd-4664-83c0-a0d986c4c604
ObjectId : aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb
ObjectType : User
CanDelegate : False
Description : This is a new role assignment for John
Expand Down
2 changes: 1 addition & 1 deletion azps-15.4.0/Az.Resources/Update-AzADServicePrincipalAppRoleAssignment.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ Update the navigation property appRoleAssignments in servicePrincipals

### Example 1: Update the AppRoleId
```powershell
Update-AzADServicePrincipalAppRoleAssignment -AppRoleAssignmentId Zbm-cUeDXUmlicIc3eenIoFW9pZ_gRBIudKgu0gaMIw -ServicePrincipalId 71beb965-8347-495d-a589-c21cdde7a722 -AppRoleId 649ae968-bdf9-4f22-bb2c-2aa1b4af0a83
Update-AzADServicePrincipalAppRoleAssignment -AppRoleAssignmentId Zbm-cUeDXUmlicIc3eenIoFW9pZ_gRBIudKgu0gaMIw -ServicePrincipalId aaaaaaaa-bbbb-cccc-1111-222222222222 -AppRoleId bbbbbbbb-cccc-dddd-2222-333333333333
```

Update the assigned App role id.
Expand Down
8 changes: 4 additions & 4 deletions azps-15.4.0/Az.Resources/Update-AzManagementGroup.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ Update-AzManagementGroup -GroupName "TestGroup" -DisplayName "New Display Name"
Id : /providers/Microsoft.Management/managementGroups/TestGroup
Type : /providers/Microsoft.Management/managementGroups
Name : TestGroup
TenantId : 00001111-aaaa-2222-bbbb-3333cccc4444
TenantId : aaaabbbb-0000-cccc-1111-dddd2222eeee
DisplayName : New Display Name
UpdatedTime : 2/1/2018 12:03:37 PM
UpdatedBy : 64360beb-ffb4-43a8-9314-01aa34db95a9
Expand All @@ -74,7 +74,7 @@ Update-AzManagementGroup -GroupName "TestGroup" -ParentId "/providers/Microsoft.
Id : /providers/Microsoft.Management/managementGroups/TestGroup
Type : /providers/Microsoft.Management/managementGroups
Name : TestGroup
TenantId : 00001111-aaaa-2222-bbbb-3333cccc4444
TenantId : aaaabbbb-0000-cccc-1111-dddd2222eeee
DisplayName : TestGroup
UpdatedTime : 2/1/2018 12:03:37 PM
UpdatedBy : 64360beb-ffb4-43a8-9314-01aa34db95a9
Expand All @@ -92,7 +92,7 @@ Get-AzManagementGroup -GroupName "TestGroup" | Update-AzManagementGroup -Display
Id : /providers/Microsoft.Management/managementGroups/TestGroup
Type : /providers/Microsoft.Management/managementGroups
Name : TestGroup
TenantId : 00001111-aaaa-2222-bbbb-3333cccc4444
TenantId : aaaabbbb-0000-cccc-1111-dddd2222eeee
DisplayName : TestDisplayName
UpdatedTime : 2/1/2018 12:03:37 PM
UpdatedBy : 64360beb-ffb4-43a8-9314-01aa34db95a9
Expand All @@ -111,7 +111,7 @@ Update-AzManagementGroup -GroupName "TestGroup" -ParentObject $parentObject
Id : /providers/Microsoft.Management/managementGroups/TestGroup
Type : /providers/Microsoft.Management/managementGroups
Name : TestGroup
TenantId : 00001111-aaaa-2222-bbbb-3333cccc4444
TenantId : aaaabbbb-0000-cccc-1111-dddd2222eeee
DisplayName : TestGroupDisplayName
UpdatedTime : 2/1/2018 11:16:12 AM
UpdatedBy : 00001111-aaaa-2222-bbbb-3333cccc4444
Expand Down
6 changes: 3 additions & 3 deletions azps-15.4.0/Az.Resources/Update-AzManagementGroupHierarchySetting.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ Update-AzManagementGroupHierarchySetting -GroupName c7a87cda-9a66-4920-b0f8-869b
Id : /providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0/settings/default
Type : Microsoft.Management/managementGroups/settings
Name : default
TenantId : 00001111-aaaa-2222-bbbb-3333cccc4444
TenantId : aaaabbbb-0000-cccc-1111-dddd2222eeee
RequireAuthorizationForGroupCreation : true
DefaultManagementGroup :
```
Expand All @@ -56,7 +56,7 @@ Update-AzManagementGroupHierarchySetting -GroupName c7a87cda-9a66-4920-b0f8-869b
Id : /providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0/settings/default
Type : Microsoft.Management/managementGroups/settings
Name : default
TenantId : 00001111-aaaa-2222-bbbb-3333cccc4444
TenantId : aaaabbbb-0000-cccc-1111-dddd2222eeee
RequireAuthorizationForGroupCreation : false
DefaultManagementGroup : TestGroup
```
Expand All @@ -70,7 +70,7 @@ Update-AzManagementGroupHierarchySetting -GroupName c7a87cda-9a66-4920-b0f8-869b
Id : /providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0/settings/default
Type : Microsoft.Management/managementGroups/settings
Name : default
TenantId : 00001111-aaaa-2222-bbbb-3333cccc4444
TenantId : aaaabbbb-0000-cccc-1111-dddd2222eeee
RequireAuthorizationForGroupCreation : true
DefaultManagementGroup : TestGroup
```
Expand Down
6 changes: 3 additions & 3 deletions azps-15.4.0/Az.Resources/Update-AzRoleAssignmentScheduleRequest.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,14 +45,14 @@ Update a role assignment schedule request.
```powershell
$guid = "12f8978c-5d8d-4fbf-b4b6-2f43eeb43eca"
$startTime = Get-Date -Format o
$scope = "/subscriptions/11111111-2222-3333-4444-123456789101/"
Update-AzRoleAssignmentScheduleRequest -Name $guid -Scope $scope -ExpirationDuration PT1H -ExpirationType AfterDuration -PrincipalId 5a4bdd72-ab3e-4d8e-ab0f-8dd8917481a2 -RequestType AdminAssign -RoleDefinitionId subscriptions/11111111-2222-3333-4444-123456789101/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7 -ScheduleInfoStartDateTime $startTime
$scope = "/subscriptions/bbbbbbbb-cccc-dddd-2222-333333333333/"
Update-AzRoleAssignmentScheduleRequest -Name $guid -Scope $scope -ExpirationDuration PT1H -ExpirationType AfterDuration -PrincipalId aaaaaaaa-bbbb-cccc-1111-222222222222 -RequestType AdminAssign -RoleDefinitionId subscriptions/bbbbbbbb-cccc-dddd-2222-333333333333/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7 -ScheduleInfoStartDateTime $startTime
```

```output
Name Type Scope RoleDefinitionId
---- ---- ----- ----------------
12f8978c-5d8d-4fbf-b4b6-2f43eeb43eca Microsoft.Authorization/roleAssignmentScheduleRequests /subscriptions/11111111-2222-3333-4444-123456789101 /subscriptions/11111111-2222-3333-4444-123456789101/providers/Microsoft.Authori…
12f8978c-5d8d-4fbf-b4b6-2f43eeb43eca Microsoft.Authorization/roleAssignmentScheduleRequests /subscriptions/bbbbbbbb-cccc-dddd-2222-333333333333 /subscriptions/bbbbbbbb-cccc-dddd-2222-333333333333/providers/Microsoft.Authori…
```

Updates a request to provision an active assignment of `roleDefinition` on the `scope` for the specified `principal`
Expand Down