Document Details

Automation Role Based Access Control
Home / Scan #41 / Automation Role Based Access Control
Sad Tux - Windows bias detected
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types
powershell_heavy
windows_first
missing_linux_example
Summary
The documentation page demonstrates a Windows bias by providing only PowerShell-based examples and workflows for managing Azure RBAC in Automation accounts. All command-line instructions use Azure PowerShell cmdlets, with no mention or examples of Azure CLI (cross-platform) or bash scripting. There is no guidance for Linux or macOS users, and the documentation implicitly assumes a Windows/PowerShell environment for automation tasks.
Recommendations
  • Add equivalent Azure CLI (az) command examples alongside PowerShell examples for all RBAC management tasks, including role assignment, listing, and removal.
  • Explicitly mention that Azure CLI can be used from Linux, macOS, and Windows, and provide bash script examples where appropriate.
  • Where scripts are shown, provide both PowerShell and bash/CLI versions, or link to cross-platform documentation.
  • Clarify in introductory sections that both PowerShell and CLI are supported, and provide links to relevant documentation for each.
  • Review references to 'PowerShell' in headings and ensure parity with CLI tooling in both content and prominence.
GitHub Create Pull Request

Scan History

Date Scan Status Result
2025-07-12 23:44 #41 cancelled Biased Biased
2025-07-12 00:58 #8 cancelled Clean Clean
2025-07-10 05:06 #7 processing Clean Clean
2025-07-09 23:22 #6 cancelled Clean Clean

Flagged Code Snippets

[Get-AzRoleAssignment](/powershell/module/az.resources/get-azroleassignment) lists Azure role assignments at the specified scope. Without any parameters, this cmdlet returns all the role assignments made under the subscription. Use the `ExpandPrincipalGroups` parameter to list access assignments for the specified user, as well as the groups that the user belongs to.

**Example:** Use the following cmdlet to list all the users and their roles within an Automation account.


Use [New-AzRoleAssignment](/powershell/module/Az.Resources/New-AzRoleAssignment) to assign access to users, groups, and applications to a particular scope.

**Example:** Use the following command to assign the "Automation Operator" role for a user in the Automation account scope.


Use [Remove-AzRoleAssignment](/powershell/module/Az.Resources/Remove-AzRoleAssignment) to remove access of a specified user, group, or application from a particular scope.

**Example:** Use the following command to remove the user from the Automation Operator role in the Automation account scope.