Document Details
Api Management Role Based Access Control
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
powershell_heavy
windows_first
missing_linux_example
Summary
The documentation page demonstrates a Windows bias by providing only PowerShell examples for creating custom roles, referencing Azure PowerShell before Azure CLI in tool lists, and omitting equivalent Azure CLI or Bash examples that would be more familiar to Linux/macOS users. This may make it less accessible for users on non-Windows platforms.
Recommendations
- Add equivalent Azure CLI examples alongside PowerShell code blocks for all role management tasks.
- When listing tools (Azure PowerShell, Azure CLI, REST API), alternate the order or mention Azure CLI first in some instances to avoid a 'Windows-first' impression.
- Explicitly mention that all operations can be performed from Linux/macOS using Azure CLI or REST API, and provide links or examples.
- Consider including Bash script examples or cross-platform instructions where possible.
- Review and update the 'ms.custom' metadata to reflect cross-platform parity, not just Azure PowerShell.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
Biased
|
| 2026-01-13 00:00 | #246 | completed |
Biased
|
| 2026-01-12 00:00 | #243 | cancelled |
Biased
|
| 2026-01-11 00:00 | #240 | completed |
Biased
|
| 2026-01-10 00:00 | #237 | completed |
Biased
|
| 2026-01-09 00:34 | #234 | completed |
Biased
|
| 2026-01-08 00:53 | #231 | completed |
Biased
|
| 2026-01-08 00:00 | #228 | cancelled |
 Clean
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-09-12 00:00 | #109 | completed |
Biased
|
| 2025-08-12 00:00 | #78 | cancelled |
Biased
|
| 2025-07-13 21:25 | #47 | cancelled |
Clean
|
| 2025-07-13 20:48 | #44 | cancelled |
Biased
|
| 2025-07-09 13:09 | #3 | cancelled |
Clean
|
| 2025-07-08 04:23 | #2 | cancelled |
Biased
|
Flagged Code Snippets
$role = Get-AzRoleDefinition "API Management Service Reader Role"
$role.Id = $null
$role.Name = 'Calculator API Contributor'
$role.Description = 'Has read access to Contoso APIM instance and write access to the Calculator API.'
$role.Actions.Add('Microsoft.ApiManagement/service/apis/write')
$role.Actions.Add('Microsoft.ApiManagement/service/apis/*/write')
$role.AssignableScopes.Clear()
$role.AssignableScopes.Add('/subscriptions/<Azure subscription ID>/resourceGroups/<resource group name>/providers/Microsoft.ApiManagement/service/<APIM service instance name>/apis/<API name>')
New-AzRoleDefinition -Role $role
New-AzRoleAssignment -ObjectId <object ID of the user account> -RoleDefinitionName 'Calculator API Contributor' -Scope '/subscriptions/<subscription ID>/resourceGroups/<resource group name>/providers/Microsoft.ApiManagement/service/<APIM service instance name>/apis/<API name>'