From e48427ee2d4aec3081fa3fc41bca961c876c57f9 Mon Sep 17 00:00:00 2001 From: ralfk Date: Fri, 3 Nov 2023 11:17:08 +0000 Subject: [PATCH] . --- Eingang/Activate-roles.md | 44 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 Eingang/Activate-roles.md diff --git a/Eingang/Activate-roles.md b/Eingang/Activate-roles.md new file mode 100644 index 0000000..e52eced --- /dev/null +++ b/Eingang/Activate-roles.md @@ -0,0 +1,44 @@ +``` + +Einzelne Rolle, mehrere Rollen: + +function pimga + +{ + + Enable-DCAzureADPIMRole -RolesToActivate "Global Administrator" -UseMaximumTimeAllowed -Reason "Ich werde die Rolle benutzen, daher aktiviere ich sie am $(get-date)" + +} + + +function pimall + +{ + + Enable-DCAzureADPIMRole -RolesToActivate "Intune Administrator","Exchange Administrator","Insights Administrator","Compliance Administrator","Power Platform Administrator","Global Administrator","Power BI Administrator","SharePoint Administrator","Dynamics 365 Administrator","Windows 365 Administrator","Security Administrator","Billing Administrator" -UseMaximumTimeAllowed -Reason "Ich werde die Rollen benutzen, daher aktiviere ich sie am $(get-date)" -ErrorAction SilentlyContinue + +} +[Gestern 13:40] Schachtschneider, Thomas +Azure: + +function azrole + +{ + + $managementgroupID = "bauer-caf" # Tenant Root Group + + $guid = (New-Guid) + + $startTime = Get-Date -Format o + + $userObjectID = "c0ba4f65-286a-4481-97ff-6a1a09fcaeec" + + $RoleDefinitionID = "8e3af657-a8ff-443c-a75c-2fe8c4bcb635" # Owner + + $scope = "/providers/Microsoft.Management/managementGroups/$managementgroupID" + + New-AzRoleAssignmentScheduleRequest -Name $guid -Scope $scope -ExpirationDuration PT8H -ExpirationType AfterDuration -PrincipalId $userObjectID -RequestType SelfActivate -RoleDefinitionId /providersproviders/Microsoft.Management/managementGroups/$managementgroupID/providers/Microsoft.Authorization/roleDefinitions/$roledefinitionId -ScheduleInfoStartDateTime $startTime -Justification get-date + +} + +``` \ No newline at end of file