Skip to content

Commit 1e22486

Browse files
authored
Merge pull request #124933 from ThomVanL/patch-13
fix: Troubleshoot Azure RBAC limits
2 parents bf6f784 + fa8f289 commit 1e22486

File tree

4 files changed

+7
-7
lines changed

4 files changed

+7
-7
lines changed

articles/role-based-access-control/includes/query/authorization-same-principal-scope-condition.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,15 @@ ms.author: rolyon
77
---
88

99
```kusto
10-
AuthorizationResources
10+
authorizationresources
1111
| where type =~ "microsoft.authorization/roleassignments"
1212
| where id startswith "/subscriptions"
1313
| extend PrincipalId = tostring(properties.principalId)
1414
| extend Scope = tolower(properties.scope)
1515
| extend RoleDefinitionId = tolower(tostring(properties.roleDefinitionId))
1616
| extend condition = tostring(properties.condition)
1717
| join kind = leftouter (
18-
AuthorizationResources
18+
authorizationresources
1919
| where type =~ "microsoft.authorization/roledefinitions"
2020
| extend RoleName = tostring(properties.roleName)
2121
| extend RoleId = tolower(id)

articles/role-based-access-control/includes/query/authorization-same-principal-scope.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,14 +7,14 @@ ms.author: rolyon
77
---
88

99
```kusto
10-
AuthorizationResources
10+
authorizationresources
1111
| where type =~ "microsoft.authorization/roleassignments"
1212
| where id startswith "/subscriptions"
1313
| extend PrincipalId = tostring(properties.principalId)
1414
| extend Scope = tolower(properties.scope)
1515
| extend RoleDefinitionId = tolower(tostring(properties.roleDefinitionId))
1616
| join kind = leftouter (
17-
AuthorizationResources
17+
authorizationresources
1818
| where type =~ "microsoft.authorization/roledefinitions"
1919
| extend RoleName = tostring(properties.roleName)
2020
| extend RoleId = tolower(id)

articles/role-based-access-control/includes/query/authorization-same-role-principal-condition.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ authorizationresources
2121
| extend rdId = tolower(id)
2222
| project RoleDefinitionName, rdId
2323
) on $left.RoleDefinitionId == $right.rdId
24-
| summarize count_ = count(), Scopes = make_set(tolower(properties.scope)) by RoleDefinitionId_PrincipalId,RoleDefinitionName
24+
| summarize count_ = count(), Scopes = make_set(tolower(properties.scope)) by RoleDefinitionId_PrincipalId,RoleDefinitionName, condition
2525
| project RoleDefinitionId = split(RoleDefinitionId_PrincipalId, "_", 0)[0], RoleDefinitionName, PrincipalId = split(RoleDefinitionId_PrincipalId, "_", 1)[0], count_, Scopes, condition
2626
| where count_ > 1
2727
| order by count_ desc

articles/role-based-access-control/includes/query/authorization-unused-custom-roles.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,13 @@ ms.author: rolyon
77
---
88

99
```kusto
10-
AuthorizationResources
10+
authorizationresources
1111
| where type =~ "microsoft.authorization/roledefinitions"
1212
| where tolower(properties.type) == "customrole"
1313
| extend rdId = tolower(id)
1414
| extend Scope = tolower(properties.assignableScopes)
1515
| join kind = leftouter (
16-
AuthorizationResources
16+
authorizationresources
1717
| where type =~ "microsoft.authorization/roleassignments"
1818
| extend RoleId = tolower(tostring(properties.roleDefinitionId))
1919
| summarize RoleAssignmentCount = count() by RoleId

0 commit comments

Comments
 (0)