我得到了下面的代码片段,由于各种原因我正尝试替换它。
$SubscriptionPIMID = (Get-AzureADMSPrivilegedResource -ProviderId 'AzureResources' -Filter "ExternalId eq '/subscriptions/$subscriptionId'").Id
以上内容需要使用 AzureAdPreview 模块,而我正试图摆脱该模块;其次,当从自动化运行时,它需要执行 Connect-AzureAD,这被证明很难实现自动化,此外我更喜欢使用 Graph。
我尝试了下面的方法。
Connect-MgGraph -Scopes "PrivilegedAccess.Read.AzureResources"
# Set the subscription ID
$subscriptionId = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
# Get the PIM resource for that subscription
$pimResource = Get-MgPrivilegedAccessResource `
-ProviderId "AzureResources" `
-Filter "externalId eq '/subscriptions/$subscriptionId'"
# Output the resource ID
$pimResource.Id
似乎也不起作用,因为
Get-MgPrivilegedAccessResource: The term 'Get-MgPrivilegedAccessResource' is not recognized as a name of a cmdlet, function, script file, or executable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
即使在安装模块并导入图形模块后仍然出现错误。