Package: azure-cli-role
Microsoft Azure CLI ‘role’ Command Module for Role-Based Access Control (RBAC)This package is for the ‘role’ module.
i.e. ‘az role’Release History2.6.4Minor fixes.2.6.3Minor fixes.2.6.2role assignment: support scope of management group2.6.1create-for-rbac: hide ‘–password’ as the preparations to pull the plug completely in 2019 May2.6.0[BREAKING CHANGE] ‘group create’/’app create’/’sp create-for-rbac’: supports idempotent, hence confliction error will not be surfaced2.5.0create-for-rbac: handle –years correctly[BREAKING CHANGE]role assignment delete: prompt when delete all assignments under the subscription unconditionally2.4.3ad app/sp credential reset: support –end-datead app permission add: support to add permissions on existing apiad app permission list: fix a bad error when there is no permissionsad sp delete: skip role assignment delete if the current account has no subscriptionad app create: make –identifier-uris default to empty list if not provided2.4.2role definition update: use id to resolve definition correctlyad app credential reset: drop the assumption that app’s service principal always exists2.4.1az ad app create/update: support app roles2.4.0az identitymoved here from inside of theazure-cli-vmcommand_module.2.3.1Minor fixes2.3.0create-for-rbac: deprecate–passwordfor securer password auto-generated by CLI2.2.0BREAKING CHANGE:az ad app/sp listwill by default output the first 100 objects instead of getting all of them.2.1.11support custom identifier for password credential2.1.10ad app update: address a failure caused by updating immutable credentialsgraph: output warnings to communicate breaking changes in the near future for “ad app/sp list”2.1.9support API permission management, signed-in-user, and application password & certificate credential managementad sp create-for-rbac: clarify the confusion between displayName and service principal namesupport grant permissions to AAD apps2.1.8support add/remove/list owner on AAD Applciation and Group objects2.1.7ad app owner: Adds support for listing Azure AD app owners.ad sp owner: Adds support for listing Azure AD service principal owners.2.1.6role: ensure role definition create & update commands accept multiple permission configurationscreate-for-rbac: ensure home page uri is always “https”2.1.5support list user’s group memberships2.1.4Minor fixes.2.1.3role assignment: fix a recent regression that principalName is missing2.1.2support for stack profile 2017-03-09-profile2.1.1ad app update: Fixes issue where generic update parameters would not work correctly.2.1.0BREAKING CHANGE: ‘show’ commands log error message and fail with exit code of 3 upon a missing resource.2.0.27Minor fixes.2.0.26Minor fixes.2.0.25ad: remove stack traces from graph exceptions before surface to usersad sp create: do not throw if CLI can’t resolve app id2.0.24ad app update: add generic update support2.0.23BREAKING CHANGE: remove deprecatedaz ad sp reset-credentialsMinor fixes.2.0.22sdistis now compatible with wheel 0.31.02.0.21graph: support required access configuration and native clientrbac: ensure collection has less than 1000 ids on resolving graph objectsad sp: new commands to manage credentials “az ad sp credential reset/list/delete”role assignments: (breaking change)list/show output has “properties” removed to align with SDKrole definition: supportdataActionsandnotDataActions2.0.20role assignments: expose “role assignment list-changelogs” for rbac audit2.0.18ad app update: expose “–available-to-other-tenants”2.0.17role assignment: expose –assignee-object-id to bypass graph query2.0.16Update for CLI core changes.2.0.15role assignment list: show default assignments for classic administratorsad sp reset-credentials: support to add credentials instead of overwritingcreate-for-rbac: emit out an actionable error if provisioning application failed for lack of permissions2.0.14minor fixes2.0.13 (2017-10-09)minor fixes2.0.12 (2017-09-22)minor fixes2.0.11 (2017-08-28)minor fixes2.0.10 (2017-08-11)minor fixes2.0.9 (2017-07-27)minor fixes2.0.8 (2017-07-07)create-for-rbac: support output in SDK auth file format2.0.7 (2017-06-21)No changes.2.0.6 (2017-06-13)rbac: clean up role assignments and related AAD application when delete a service principal (#3610)2.0.5 (2017-05-30)ad: for ‘app create’ command, mention time format in the arg descriptions for –start-date/–end-dateoutput deprecating information on using ‘–expanded-view’Add Key Vault integration to the create-for-rbac and reset-credentials commands.2.0.4 (2017-05-09)Minor fixes.2.0.3 (2017-04-28)create-for-rbac: ensure SP’s end date will not exceed certificate’s expiration date (#2989)RBAC: add full support for ‘ad group’ (#2016)2.0.2 (2017-04-17)role: fix issues on role definition update (#2745)create-for-rbac: ensure user provided password is picked up2.0.1 (2017-04-03)role: fix the error when supply role in guid format (#2667)Fix code style of azure-cli-role (#2608)rbac:catch more graph error (#2567)core: support login using service principal with a cert (#2457)2.0.0 (2017-02-27)GA release.0.1.2rc2 (2017-02-22)Documentation updates.0.1.2rc1 (2017-02-17)Support –skip-assignment for ‘az ad sp create-for-rbac’Show commands return empty string with exit code 0 for 404 responses0.1.1b2 (2017-01-30)Support Python 3.6.0.1.1b1 (2017-01-17)‘create-for-rbac’ command accepts displayname.0.1.0b11 (2016-12-12)Preview release.