🚀 New PowerShell Script: Reveal Explicit Azure IAM Permissions 🔍🔐
🛡️ Azure IAM: Report Explicit Role Assignments This PowerShell script collects all explicit role assignments across your Azure environment – including Management Groups, Subscriptions, Resource Groups, and Resources – and generates an easy-to-read HTML report . ✅ What It Does: Skips inherited permissions – only shows direct (explicit) role assignments Lists user/group/service principal roles by scope Exports a local HTML report you can archive or review Explicit IAM Report – PowerShell Connect-AzAccount function Get-ExplicitRoleAssignments { param ([string]$Scope) Write-Host "Fetching role assignments for scope: $Scope" try { $roleAssignments = Get-AzRoleAssignment -Scope $Scope -ErrorAction Stop $explicitAssignments = $roleAssignments | Where-Object { $_.Scope -eq $Scope } return $explicitAssignments } catch { Write-Host "Error fetching assignments...
