Adaxes Report for Azure objects ownership?

Question

Hi, what is the correct way to create Adaxes Report that will show all explicit Azure role OWNER assignments?

I know how to do it in PowerShell so just to be sure, there is no builtin Adaxes feature.

$CurrentContext = Get-AzContext
$Subscriptions = Get-AzSubscription -TenantId $CurrentContext.Tenant.Id
foreach ($Subscription in $Subscriptions) {
    $Context = Set-AzContext -TenantId $Subscription.TenantId -SubscriptionId $Subscription.Id -Force

    Get-AzRoleAssignment | ? RoleDefinitionName -eq 'owner'
}

Thanks!

Answer 1

Hello,

Unfortunately, there is no built-in function in Adaxes to make the desired output. You can try using the script in an Adaxes custom command and output the results into the execution log using method $Context.Logmessage. The following SDK article should be helpful: https://adaxes.com/sdk/CloudServicesScriptContextClass. Should you have issues updating your script accordingly, please, provide all the possible details regarding the desired output with live examples.

Comments

OK I've solved tis by creating custom columns and fill them using $Context.Items.Add().

Btw does Adaxes support anything like cached reports? So users don't have to run the report over and over again and instead have the possibility to see some cached older version?

---

Hello,

OK I've solved tis by creating custom columns and fill them using $Context.Items.Add().

Thank you for the confirmation, it is much appreciated.

Btw does Adaxes support anything like cached reports?

Unfortunately, there is no such thing as cached reports. The thing is that reports are generated based on the permissions of the logged on user. As such, caching might result in a user seeing something they should not see and vice versa.

---

But for sime kind of reports this could be an option (static reports without any user input).

It would be super useful mainly for cloud reports, because Azure can be slow (throttling) which can make such Report unusable. And unfortunately more and more tasks are managed from Azure these days.

Also you could generate one cache per possible group of permissions to avoid any security concerns.

Think about it :)

---

Hello,

Thank you for the suggestion. We have forwarded it to the corresponding department for consideration.

For your information, we have Azure AD management in our roadmap. The feature will be available in the next major release.