How To Assign Roles - Document Details

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.

View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types

powershell_heavy

missing_linux_example

windows_tools

Summary

The documentation page demonstrates a Windows bias by providing only PowerShell examples for command-line role management, with no equivalent examples for Azure CLI (which is cross-platform and preferred on Linux/macOS). The 'Configure Azure RBAC' section exclusively details PowerShell usage, omitting Linux-friendly tools and workflows. This can disadvantage Linux users or those on non-Windows platforms.

Recommendations

Add equivalent Azure CLI examples for all PowerShell commands shown, as Azure CLI is cross-platform and widely used on Linux and macOS.
In the 'Configure Azure RBAC' section, present Azure CLI instructions before or alongside PowerShell to ensure parity.
Explicitly mention that Azure CLI can be used on all platforms and provide links to its documentation.
Consider including Bash script snippets or terminal commands where appropriate to illustrate Linux workflows.
Review other sections for subtle Windows-first language or assumptions, and ensure instructions are platform-neutral where possible.

Create Pull Request

Scan History

Date	Scan	Status	Result
2025-07-13 21:37	#48	completed	Biased
2025-07-12 23:44	#41	cancelled	Biased
2025-07-09 13:09	#3	cancelled	Clean
2025-07-08 04:23	#2	cancelled	Clean

Flagged Code Snippets

* [Get-AzRoleAssignment](/powershell/module/az.resources/get-azroleassignment) lists Azure role assignments at the specified scope. Without any parameters, this cmdlet returns all the role assignments made under the subscription. Use the `ExpandPrincipalGroups` parameter to list access assignments for the specified user, and the groups that the user belongs to.

    **Example**: Use the following cmdlet to list all the users and their roles within a load testing resource.

* Use [New-AzRoleAssignment](/powershell/module/Az.Resources/New-AzRoleAssignment) to assign access to users, groups, and applications to a particular scope.

    **Example**: Use the following command to assign the "Load Test Reader" role for a user in the load testing resource scope.

* Use [Remove-AzRoleAssignment](/powershell/module/Az.Resources/Remove-AzRoleAssignment) to remove access of a specified user, group, or application from a particular scope.

    **Example**: Use the following command to remove the user from the Load Test Reader role in the load testing resource scope.