Az.Resources

Adds an API permission.

Adds member to group.

Captures a resource group as a template and saves it to a file.

Exports a Template Spec to the local filesystem

Lists key credentials and password credentials for an application.

Lists entities from applications or get entity from applications by key

Lists API permissions the application has requested.

Lists entities from groups or get entity from groups by key

Lists members from group.

Lists entities from service principals or get entity from service principals by key

Lists key credentials and password credentials for an service principal.

Lists entities from users or get entity from users by key

Lists Azure RBAC deny assignments at the specified scope. By default it lists all deny assignments in the selected Azure subscription. Use respective parameters to list deny assignments to a specific user, or to list deny assignments on a specific resource group or resource.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Get deployment

Get deployment operation

Gets or lists deployment scripts.

Gets the log of a deployment script execution.

Gets a template What-If result for a deployment at subscription scope.

Gets all locations and the supported resource providers for each location.

Gets managed applications

Gets managed application definitions

Gets Management Group(s)

Get deployment at a management group

Get deployment operation for management group deployment

Gets a template What-If result for a deployment at management group scope.

Get-AzPolicyAlias retrieves and outputs Azure provider resource types that have aliases defined and match the given parameter values. If no parameters are provided, all provider resource types that contain an alias will be output. The -ListAvailable switch modifies this behavior by listing all matching resource types including those without aliases.

Gets policy assignments.

Gets policy definitions.

Gets policy exemptions.

Gets policy set definitions.

Gets information about Azure provider features.

Gets the operations for an Azure resource provider that are securable using Azure RBAC.

Gets a feature registration in your account.

Gets resources.

Gets resource groups.

Gets the deployments in a resource group.

Gets the resource group deployment operation

Gets a template What-If result for a deployment at resource group scope.

Gets a resource lock.

Gets a resource provider.

Lists Azure RBAC role assignments at the specified scope. By default it lists all role assignments in the selected Azure subscription. Use respective parameters to list assignments to a specific user, or to list assignments on a specific resource group or resource.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Lists all Azure RBAC roles that are available for assignment.

Gets predefined Azure tags | Gets the entire set of tags on a resource or subscription.

Gets or lists Template Specs

Get deployment at tenant scope

Get deployment operation for deployment at tenant scope

Gets a template What-If result for a deployment at tenant scope.

Invokes an action on a resource.

Moves a resource to a different resource group or subscription.

Creates key credentials or password credentials for an application.

Adds new entity to applications

Adds new entity to groups

Adds new entity to servicePrincipals

Creates key credentials or password credentials for an service principal.

Adds new entity to users

Create a deployment

Creates an Azure managed application.

Creates a managed application definition.

Creates a Management Group

Create a deployment at a management group

Adds a Subscription to a Management Group.

Creates a policy assignment.

Creates a policy definition.

Creates a policy exemption.

Creates a policy set definition.

Creates a resource.

Creates an Azure resource group.

Adds an Azure deployment to a resource group.

Creates a resource lock.

Assigns the specified RBAC role to the specified principal, at the specified scope.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}

Creates a custom role in Azure RBAC. Provide either a JSON role definition file or a PSRoleDefinition object as input. First, use the Get-AzRoleDefinition command to generate a baseline role definition object. Then, modify its properties as required. Finally, use this command to create a custom role using role definition.

Creates a predefined Azure tag or adds values to an existing tag | Creates or updates the entire set of tags on a resource or subscription.

Creates a new Template Spec.

Create a deployment at tenant scope

Publishes a Bicep file to a registry.

Registers an Azure provider feature in your account.

Creates a feature registration in your account.

Registers a resource provider.

Removes key credentials or password credentials for an application.

Deletes entity from applications

Removes an API permission.

Deletes entity from groups.

Deletes member from group Users, contacts, and groups that are members of this group. HTTP Methods: GET (supported for all groups), POST (supported for security groups and mail-enabled security groups), DELETE (supported only for security groups) Read-only. Nullable. Supports $expand.

Deletes entity from service principal.

Removes key credentials or password credentials for an service principal.

Deletes entity from users.

Removes a deployment and any associated operations

Removes a deployment script and its associated resources.

Removes a managed application

Removes a managed application definition

Removes a Management Group

Removes a deployment at a management group and any associated operations

Removes a Subscription from a Management Group.

Removes a policy assignment.

Removes a policy definition.

Removes a policy exemption.

Removes a policy set definition.

Removes a resource.

Removes a resource group.

Removes a resource group deployment and any associated operations.

Removes a resource lock.

Removes a role assignment to the specified principal who is assigned to a particular role at a particular scope.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Deletes a custom role in Azure RBAC. The role to be deleted is specified using the Id property of the role. Delete will fail if there are existing role assignments made to the custom role.

Deletes predefined Azure tags or values | Deletes the entire set of tags on a resource or subscription.

Removes a Template Spec

Removes a deployment at tenant scope and any associated operations

Saves the log of a deployment script execution to disk.

Saves a deployment template to a file.

Saves a deployment template to a file.

Saves a resource group deployment template to a file.

Saves a deployment template to a file.

Updates managed application

Updates managed application definition

Modifies a policy assignment.

Modifies a policy definition.

Modifies a policy exemption.

Modifies a policy set definition

Modifies a resource.

Modifies a resource group.

Modifies a resource lock.

Update an existing Role Assignment.

The cmdlet may call below Microsoft Graph API according to input parameters:

• GET /users/{id}
• GET /servicePrincipals/{id}
• GET /groups/{id}
• GET /directoryObjects/{id}
• POST /directoryObjects/getByIds

Modifies a custom role in Azure RBAC. Provide the modified role definition either as a JSON file or as a PSRoleDefinition. First, use the Get-AzRoleDefinition command to retrieve the custom role that you wish to modify. Then, modify the properties that you wish to change. Finally, save the role definition using this command.

Modifies a Template Spec.

Cancel a running deployment

Cancel a running deployment at a management group

Cancels a resource group deployment.

Cancel a running deployment at tenant scope

Validates a deployment.

Validates a deployment at a management group.

Validates a resource group deployment.

Validates a deployment at tenant scope.

Unregisters an Azure provider feature in your account.

Removes a feature registration from your account.

Unregisters a resource provider.

Updates entity in applications

Updates entity in service principal

Updates entity in users

Updates a Management Group

Selectively updates the set of tags on a resource or subscription.