List all the Components under Azure's Contributor Role (Microsoft.Web/sites/*)

Question

I am making a user on Azure Active Directory, and want him to access only limited things inside Azure Web Apps. For a contributor role in Azure, the contributor has the following Actions assigned to it,

Microsoft.Web/sites/*

Which means it can do anything within the Web Apps.

Is there a way I can see individual components that lie under "Microsoft.Web/sites/ " (for example Microsoft.Web/sites/start) and so on? so that I can assign specific roles under Microsoft.Web/sites/ accordingly.

4c74356b41 4c74356b41 · Accepted Answer · 2019-02-10T19:51:07

Yes, you can do that with Azure PowerShell:

Get-AzProviderOperation -OperationSearchString 'Microsoft.Web/sites/*' |
    Select-Object -ExpandProperty Operation

appears you can do more or less the same with az: https://docs.microsoft.com/en-us/cli/azure/provider/operation?view=azure-cli-latest#az-provider-operation-show

List all the Components under Azure's Contributor Role (Microsoft.Web/sites/*)

1 Answers