Document Details
Api Management Role Based Access Control
❌
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Bias Types:
⚠️
powershell_heavy
⚠️
missing_linux_example
⚠️
windows_tools
Summary:
The documentation provides a detailed PowerShell example for creating and assigning custom roles but does not offer equivalent examples using cross-platform tools such as Azure CLI. PowerShell is a Windows-centric tool (though available on Linux, it is less commonly used there), and the lack of Azure CLI or bash examples may hinder Linux users. Additionally, the page references Azure PowerShell before Azure CLI in the list of tools, and the only code sample is in PowerShell.
Recommendations:
- Add equivalent Azure CLI (az role definition/az role assignment) examples alongside PowerShell code samples for custom role creation and assignment.
- When listing tools for role assignment, mention Azure CLI before or alongside Azure PowerShell to avoid implying a Windows-first workflow.
- Include bash or shell script examples where appropriate to demonstrate cross-platform compatibility.
- Explicitly state that all operations can be performed using Azure CLI and provide links to relevant CLI documentation.
Create pull request
Scan History
| Date | Scan ID | Status | Bias Status |
|---|---|---|---|
| 2025-09-12 00:00 | #109 | completed | ❌ Biased |
| 2025-08-12 00:00 | #78 | in_progress | ❌ Biased |
| 2025-07-13 21:25 | #47 | cancelled | ✅ Clean |
| 2025-07-13 20:48 | #44 | cancelled | ❌ Biased |
| 2025-07-09 13:09 | #3 | cancelled | ✅ Clean |
| 2025-07-08 04:23 | #2 | cancelled | ❌ Biased |
Flagged Code Snippets
$role = Get-AzRoleDefinition "API Management Service Reader Role"
$role.Id = $null
$role.Name = 'Calculator API Contributor'
$role.Description = 'Has read access to Contoso APIM instance and write access to the Calculator API.'
$role.Actions.Add('Microsoft.ApiManagement/service/apis/write')
$role.Actions.Add('Microsoft.ApiManagement/service/apis/*/write')
$role.AssignableScopes.Clear()
$role.AssignableScopes.Add('/subscriptions/<Azure subscription ID>/resourceGroups/<resource group name>/providers/Microsoft.ApiManagement/service/<APIM service instance name>/apis/<API name>')
New-AzRoleDefinition -Role $role
New-AzRoleAssignment -ObjectId <object ID of the user account> -RoleDefinitionName 'Calculator API Contributor' -Scope '/subscriptions/<subscription ID>/resourceGroups/<resource group name>/providers/Microsoft.ApiManagement/service/<APIM service instance name>/apis/<API name>'