New-AzManagedServicesEligibleAuthorizationObject

參考

模組:: Az.ManagedServices

建立適用於 EligibleAuthorization 的記憶體內部物件

Syntax

New-AzManagedServicesEligibleAuthorizationObject
   -PrincipalId <String>
   -RoleDefinitionId <String>
   [-JustInTimeAccessPolicyManagedByTenantApprover <IEligibleApprover[]>]
   [-JustInTimeAccessPolicyMaximumActivationDuration <TimeSpan>]
   [-JustInTimeAccessPolicyMultiFactorAuthProvider <MultiFactorAuthProvider>]
   [-PrincipalIdDisplayName <String>]
   [<CommonParameters>]

Description

建立適用於 EligibleAuthorization 的記憶體內部物件

範例

範例 1：建立新的 Azure Lighthouse 合格授權物件以搭配註冊定義使用

New-AzManagedServicesEligibleAuthorizationObject -PrincipalId "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" -PrincipalIdDisplayName "Test user" -RoleDefinitionId "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

PrincipalId                          PrincipalIdDisplayName RoleDefinitionId
-----------                          ---------------------- ----------------
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Test user              xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

建立新的 Azure Lighthouse 合格授權物件，以搭配註冊定義使用。

範例 2：使用 JustInTime 設定建立新的 Azure Lighthouse 合格授權

$approver = New-AzManagedServicesEligibleApproverObject -PrincipalId "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" -PrincipalIdDisplayName "Approver group"

$eligibleAuth = New-AzManagedServicesEligibleAuthorizationObject -PrincipalId "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" -PrincipalIdDisplayName "Test user" -RoleDefinitionId "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" -JustInTimeAccessPolicyManagedByTenantApprover $approver -JustInTimeAccessPolicyMultiFactorAuthProvider Azure -JustInTimeAccessPolicyMaximumActivationDuration 0:30

$eligibleAuth | Format-List -Property PrinciPalId, PrincipalIdDisplayName, RoleDefinitionId, JustInTimeAccessPolicyManagedByTenantApprover, JustInTimeAccessPolicyMultiFactorAuthProvider, JustInTimeAccessPolicyMaximumActivationDuration

PrincipalId                                     : xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
PrincipalIdDisplayName                          : Test user
RoleDefinitionId                                : xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
JustInTimeAccessPolicyManagedByTenantApprover   : {Approver group}
JustInTimeAccessPolicyMultiFactorAuthProvider   : Azure
JustInTimeAccessPolicyMaximumActivationDuration : 00:30:00

使用 JustInTime （JIT）設定建立新的 Azure Lighthouse 合格授權物件。

參數

-JustInTimeAccessPolicyManagedByTenantApprover

合格授權的managedByTenant核准者清單。若要建構，請參閱 JUSTINTIMEACCESSPOLICYMANAGEDBYTENANTAPPROVER 屬性的 NOTES 區段，並建立哈希表。

Type:	IEligibleApprover[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-JustInTimeAccessPolicyMaximumActivationDuration

JUST-In-Time 存取要求之 ISO 8601 格式的最大存取持續時間。

Type:	TimeSpan
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-JustInTimeAccessPolicyMultiFactorAuthProvider

用於 Just-In-Time 存取要求的多重要素授權提供者。

Type:	MultiFactorAuthProvider
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-PrincipalId

Azure Active Directory 主體的標識符。

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-PrincipalIdDisplayName

Azure Active Directory 主體的顯示名稱。

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RoleDefinitionId

Azure 內建角色的標識符，定義 Azure Active Directory 主體將在投影範圍上擁有的許可權。

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

輸出

EligibleAuthorization

Share via