如何获取存储帐户容器？访问控制选项卡中的角色分配

发布于 2025-01-10 17:37:18 字数 1069 浏览 0 评论 0原文

我正在尝试使用 powershell 从存储帐户容器中获取访问控制选项卡中的所有对象。

使用命令：

Get-AzRoleAssignment -ResourceGroupName 'devtest' -ResourceName 'sa-name' -ResourceType 'Microsoft.Storage/storageAccounts'

我从以下位置获取所有对象：

存储帐户
容器

如您所见，使用此命令我会获取存储帐户和 Container 在同一调用中。

我尝试使用如下命令：

Get-AzRoleAssignment -ResourceGroupName 'devtest' -ResourceName 'SA-name' -ResourceType 'Microsoft.Storage/storageAccounts' | Where-Object -Property Scope -Like '*containers/container-name'

但我对结果不满意，因为我没有获得此容器的 Owner ，因为它是从不同资源继承的

我的问题是，如何获取 Role使用 powershell、CLI 或 REST API 为特定容器分配来自 IAM 刀片的 对象以及所有对象？

原文

i am trying to get all objects from Access Control tab from Storage Account container using powershell.

Using command:

Get-AzRoleAssignment -ResourceGroupName 'devtest' -ResourceName 'sa-name' -ResourceType 'Microsoft.Storage/storageAccounts'

I am get all objects from:

Storage Account
Containers

As you can see, using this command im getting scopes for Storage Account and Container in the same call.

I tried using command like:

Get-AzRoleAssignment -ResourceGroupName 'devtest' -ResourceName 'SA-name' -ResourceType 'Microsoft.Storage/storageAccounts' | Where-Object -Property Scope -Like '*containers/container-name'

But i am not happy with the results because i am not getting for example Owner of this container because it is inheritate from diffrent resource

My question is, how to get Role Assignments objects from IAM blade for specific container using powershell, CLI or REST API with all objects?

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

居里长安 2025-01-17 17:37:18

您可以通过列出存储帐户的所有角色分配并排除除您想要查看的容器之外的所有容器来列出特定容器上的 RBAC：

Get-AzRoleAssignment -ResourceGroupName "<your-resource-group-name>" -ResourceType "Microsoft.Storage/storageAccounts" -ResourceName "<your-storage-account-name>" | Where-Object { $_.Scope -like '*/containers/<your-container-name>' -or -not ($_.Scope -like '*/storageAccounts*/default/containers/*') }

You can list the RBAC on a specific container by listing all role assignments for the storage account and excluding all containers except for the one you want to see:

Get-AzRoleAssignment -ResourceGroupName "<your-resource-group-name>" -ResourceType "Microsoft.Storage/storageAccounts" -ResourceName "<your-storage-account-name>" | Where-Object { $_.Scope -like '*/containers/<your-container-name>' -or -not ($_.Scope -like '*/storageAccounts*/default/containers/*') }

回复收藏 0 原文

~没有更多了~