Get-AzRoleEligibilitySchedule Filter Queries

[ArmaanMcleod]

Hi all,

Does Get-AzRoleEligibilitySchedule support AND/OR in filters?

I was trying this to filter all eligible Contributor with a specific principal ID under a specific subscription:

Get-AzRoleEligibilitySchedule `
    -Scope "/subscriptions/<subscription_id>" `
    -Filter "principalId eq '<principal_id>' and roleDefinitionId eq '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c'"

And also filtering with more than one role such as Contributor or Owner

Get-AzRoleEligibilitySchedule `
    -Scope "/subscriptions/<subscription_id>" `
    -Filter "principalId eq '<principal_id>' and roleDefinitionId eq '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c' or roleDefinitionId eq '/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635'"

But it seems like these don't return everything. Not sure if these more advanced queries are supported with -Filter, and the workaround is to just filter with Where-Object.

I don't see in the documentation if this is supported: https://learn.microsoft.com/en-us/powershell/module/az.resources/get-azroleeligibilityschedule?view=azps-9.2.0#example-3-list-all-role-eligible-schedules-for-a-resource-with-filters

[dingmeng-xue]

We don't have detail instruction about how to use -Filter. We will ask service team to share more information.

[dingmeng-xue]

I convey message from @amanswaika

You can use below way.

Get-AzRoleEligibilitySchedule -Scope subscriptions/38ab2ccc-3747-4567-b36b-9478f5602f0d -Filter "assignedTo('5a4bdd72-ab3e-4d8e-ab0f-8dd8917481a2')"

[ArmaanMcleod]

@dingmeng-xue but how does this account for role defintion ID in the filter?

[dingmeng-xue]

I believe it can be found from AzureAD. @amanswaika , please correct me.