Get-AzKeyVaultRoleDefinition

參考

模組:: Az.KeyVault

列出指定範圍內所指定受控 HSM 的角色定義。

Syntax

Get-AzKeyVaultRoleDefinition
   [-HsmName] <String>
   [-Scope <String>]
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Get-AzKeyVaultRoleDefinition
   [-HsmName] <String>
   [-Scope <String>]
   [-Custom]
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Get-AzKeyVaultRoleDefinition
   [-HsmName] <String>
   [-Scope <String>]
   -RoleDefinitionName <String>
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Description

列出指定範圍內所指定受控 HSM 的角色定義。

範例

範例 1

Get-AzKeyVaultRoleDefinition -HsmName myHsm -Scope "/keys"

RoleName                              Description Permissions
--------                              ----------- -----------
Managed HSM Administrator                         1 permission(s)
Managed HSM Crypto Officer                        1 permission(s)
Managed HSM Crypto User                           1 permission(s)
Managed HSM Policy Administrator                  1 permission(s)
Managed HSM Crypto Auditor                        1 permission(s)
Managed HSM Crypto Service Encryption             1 permission(s)
Managed HSM Backup                                1 permission(s)

此範例會列出「/keys」範圍中的所有角色。

範例 2

$backupRole = Get-AzKeyVaultRoleDefinition -HsmName myHsm -RoleDefinitionName "Managed HSM Backup User"

$backupRole.Permissions

Actions     NotActions  DataActions NotDataActions
-------     ----------  ----------- --------------
0 action(s) 0 action(s) 3 action(s) 0 action(s)

$backupRole.Permissions.DataActions

Microsoft.KeyVault/managedHsm/backup/start/action
Microsoft.KeyVault/managedHsm/backup/status/action
Microsoft.KeyVault/managedHsm/keys/backup/action

此範例會取得「受控 HSM 備份」角色，並檢查其許可權。

範例 3

Get-AzKeyVaultRoleDefinition -HsmName myHsm -Custom

此範例會列出所有自定義角色定義屬於「myHsm」。。

參數

-Custom

如果指定，則只會在目錄中顯示自定義建立的角色。

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

用於與 Azure 通訊的認證、帳戶、租用戶和訂用帳戶。

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-HsmName

HSM 的名稱。

Type:	String
Position:	1
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-RoleDefinitionName

要取得的角色定義名稱。

Type:	String
Aliases:	RoleName
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Scope

角色指派或定義套用至的範圍，例如 '/' 或 '/keys' 或 '/keys/{keyName}'。省略時會使用『/』。

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

輸入

None

輸出

PSKeyVaultRoleDefinition