How to assign Owner role of an Azure subscription to a particular user group (Azure AD Synced Group) using PowerShell

Question

Hello Everyone,

This is very simple if you do it from Azure portal and infact I found an article from Microsoft explaining exactly how to do it.

Assign a user as an administrator of an Azure subscription

However I am struggling to write up a code to assign the Owner role of a particular subscription to an Azure AD Synced group. How do I do it using PowerShell?

Many thanks in advance.

Hishan

Answer 1

Hi Hishan-2429,

This process should be pretty simple using Azure PowerShell commands such as:

New-AzRoleAssignment -ObjectId <objectId> \-RoleDefinitionName <roleName>
-Scope /subscriptions/<subscriptionId>/resourcegroups/<resourceGroupName>/providers/<providerName>/<resourceType>/<resourceSubType>/<resourceName>

Here's a guide from Microsoft:

https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-powershell

--------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

I found the solution. It was well written in the following guide.

https://learn.microsoft.com/en-us/azure/role-based-access-control/tutorial-role-assignments-group-powershell