Skip to content

Commit 684e9d0

Browse files
Merge pull request #248207 from davidsmatlak/ds-ghi-113499
Updates Azure Resource Graph overview
2 parents 5716e1d + bb71e6e commit 684e9d0

File tree

1 file changed

+15
-16
lines changed

1 file changed

+15
-16
lines changed

articles/governance/resource-graph/overview.md

Lines changed: 15 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Overview of Azure Resource Graph
33
description: Understand how the Azure Resource Graph service enables complex querying of resources at scale across subscriptions and tenants.
4-
ms.date: 06/15/2022
4+
ms.date: 08/15/2023
55
ms.topic: overview
66
ms.custom: devx-track-arm-template
77
ms.author: davidsmatlak
@@ -17,10 +17,9 @@ provide the following abilities:
1717
- Query resources with complex filtering, grouping, and sorting by resource properties.
1818
- Explore resources iteratively based on governance requirements.
1919
- Assess the impact of applying policies in a vast cloud environment.
20-
- [Query changes made to resource properties](./how-to/get-resource-changes.md)
21-
(preview).
20+
- [Query changes made to resource properties](./how-to/get-resource-changes.md).
2221

23-
In this documentation, you'll go over each feature in detail.
22+
In this documentation, you review each feature in detail.
2423

2524
> [!NOTE]
2625
> Azure Resource Graph powers Azure portal's search bar, the new browse **All resources** experience,
@@ -53,8 +52,8 @@ With Azure Resource Graph, you can:
5352

5453
- Access the properties returned by resource providers without needing to make individual calls to
5554
each resource provider.
56-
- View the last seven days of resource configuration changes to see what properties changed and
57-
when. (preview)
55+
- View the last 14 days of resource configuration changes to see which properties changed and
56+
when.
5857

5958
> [!NOTE]
6059
> As a _preview_ feature, some `type` objects have additional non-Resource Manager properties
@@ -89,23 +88,23 @@ First, for details on operations and functions that can be used with Azure Resou
8988

9089
## Permissions in Azure Resource Graph
9190

92-
To use Resource Graph, you must have appropriate rights in [Azure role-based access
93-
control (Azure RBAC)](../../role-based-access-control/overview.md) with at least read access to the
94-
resources you want to query. Without at least `read` permissions to the Azure object or object
95-
group, results won't be returned.
91+
To use Resource Graph, you must have appropriate rights in [Azure role-based access control (Azure
92+
RBAC)](../../role-based-access-control/overview.md) with at least `read` access to the resources you
93+
want to query. No results are returned if you don't have at least `read` permissions to the Azure
94+
object or object group.
9695

9796
> [!NOTE]
9897
> Resource Graph uses the subscriptions available to a principal during login. To see resources of a
9998
> new subscription added during an active session, the principal must refresh the context. This
10099
> action happens automatically when logging out and back in.
101100
102-
Azure CLI and Azure PowerShell use subscriptions that the user has access to. When using REST API
103-
directly, the subscription list is provided by the user. If the user has access to any of the
101+
Azure CLI and Azure PowerShell use subscriptions that the user has access to. When you use a REST
102+
API, the subscription list is provided by the user. If the user has access to any of the
104103
subscriptions in the list, the query results are returned for the subscriptions the user has access
105-
to. This behavior is the same as when calling
106-
[Resource Groups - List](/rest/api/resources/resourcegroups/list) \- you get resource groups you've
107-
access to without any indication that the result may be partial. If there are no subscriptions in
108-
the subscription list that the user has appropriate rights to, the response is a _403_ (Forbidden).
104+
to. This behavior is the same as when calling [Resource Groups - List](/rest/api/resources/resourcegroups/list)
105+
because you get resource groups that you can access, without any indication that the result may be
106+
partial. If there are no subscriptions in the subscription list that the user has appropriate rights
107+
to, the response is a _403_ (Forbidden).
109108

110109
> [!NOTE]
111110
> In the **preview** REST API version `2020-04-01-preview`, the subscription list may be omitted.

0 commit comments

Comments
 (0)