-
Notifications
You must be signed in to change notification settings - Fork 3.3k
Open
Labels
Auto-AssignAuto assign by botAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamRBACaz roleaz rolequestionThe issue doesn't require a change to the product in order to be resolved. Most issues start as thatThe issue doesn't require a change to the product in order to be resolved. Most issues start as that
Description
Related command
az role definition list
Is your feature request related to a problem? Please describe.
According to https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list#list-role-definitions, the underlying Role Definitions - List REST API supports returning
CustomRole+BuiltInRole- only
CustomRole - only
BuiltInRole
But in CLI, --custom-role-only only supports returning
CustomRole+BuiltInRole- only
CustomRole
azure-cli/src/azure-cli/azure/cli/command_modules/role/custom.py
Lines 166 to 167 in 649886e
| if custom_role_only: | |
| roles = [r for r in roles if worker.get_role_property(r, 'role_type') == 'CustomRole'] |
thus losing the ability to only show BuiltInRole.
Describe the solution you'd like
az role definition list should support a --type argument that maps to the $filter=type+eq+'{type}' filter.
Describe alternatives you've considered
Additional context
Metadata
Metadata
Assignees
Labels
Auto-AssignAuto assign by botAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamThe command of the issue is owned by Azure CLI teamRBACaz roleaz rolequestionThe issue doesn't require a change to the product in order to be resolved. Most issues start as thatThe issue doesn't require a change to the product in order to be resolved. Most issues start as that