Skip to content

Parsing issue on table azuread_directory_role_definition #301

@MarkusGnigler

Description

@MarkusGnigler

Describe the bug
With the following query, the jsonb result contains only an empty structs.

 {
    "id": "62e90394-69f5-4237-9190-012177145e10",
    "display_name": "Global Administrator",
    "role_permissions": [
      {}
    ],
    "inherits_permissions_from": [
      {}
    ]
  }

Plugin version
v0.9.0

To reproduce
Run the query:

SELECT
	id,
	display_name,
	role_permissions,
	inherits_permissions_from
FROM
	azuread_directory_role_definition

Expected behavior
All data from the graph api should be mapped to the jsonb struct

This is one definition result from the api:

      {
            "id": "62e90394-69f5-4237-9190-012177145e10",
            "displayName": "Global Administrator",
            "isBuiltIn": true,
            "isEnabled": true,
            "rolePermissions": [
                {
                    "allowedResourceActions": [
                        "microsoft.agentRegistry/allEntities/...",
                        "microsoft.azure.advancedThreatProtection/...",
                        "microsoft.azure.informationProtection/...",
                        "microsoft.azure.serviceHealth/...",
                        ...
                    ],
                    "condition": null
                }
            ],
            "inheritsPermissionsFrom": [
                {
                    "id": "..."
                }
            ],
            ...
        },

Additional context
Which permissions are here required?
Are Directory.Read.All and RoleManagement.Read.Directory enough?

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingstaleNo recent activity has been detected on this issue/PR and it will be closed

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions