azure-cli-role

Microsoft Azure CLI 'role' Command Module for Role-Based Access Control (RBAC)

This package is for the 'role' module. i.e. 'az role'

.. :changelog:

Release History

2.6.4 +++++

• Minor fixes.

2.6.3 +++++

• Minor fixes.

2.6.2 +++++

• role assignment: support scope of management group

2.6.1 +++++

• create-for-rbac: hide '--password' as the preparations to pull the plug completely in 2019 May

2.6.0 +++++

• [BREAKING CHANGE] 'group create'/'app create'/'sp create-for-rbac': supports idempotent, hence confliction error will not be surfaced

2.5.0 +++++

• create-for-rbac: handle --years correctly
• [BREAKING CHANGE] role assignment delete: prompt when delete all assignments under the subscription unconditionally

2.4.3 +++++

• ad app/sp credential reset: support --end-date
• ad app permission add: support to add permissions on existing api
• ad app permission list: fix a bad error when there is no permissions
• ad sp delete: skip role assignment delete if the current account has no subscription
• ad app create: make --identifier-uris default to empty list if not provided

2.4.2 +++++

• role definition update: use id to resolve definition correctly
• ad app credential reset: drop the assumption that app's service principal always exists

2.4.1 +++++

• az ad app create/update: support app roles

2.4.0 +++++

• az identity moved here from inside of the azure-cli-vm command_module.

2.3.1 +++++

• Minor fixes

2.3.0 +++++

• create-for-rbac: deprecate --password for securer password auto-generated by CLI

2.2.0 ++++++

• BREAKING CHANGE: az ad app/sp list will by default output the first 100 objects instead of getting all of them.

2.1.11 ++++++

• support custom identifier for password credential

2.1.10 ++++++

• ad app update: address a failure caused by updating immutable credentials
• graph: output warnings to communicate breaking changes in the near future for "ad app/sp list"

2.1.9 ++++++

• support API permission management, signed-in-user, and application password & certificate credential management
• ad sp create-for-rbac: clarify the confusion between displayName and service principal name
• support grant permissions to AAD apps

2.1.8 ++++++

• support add/remove/list owner on AAD Applciation and Group objects

2.1.7 ++++++

• ad app owner: Adds support for listing Azure AD app owners.
• ad sp owner: Adds support for listing Azure AD service principal owners.

2.1.6 ++++++

• role: ensure role definition create & update commands accept multiple permission configurations
• create-for-rbac: ensure home page uri is always "https"

2.1.5 ++++++

• support list user's group memberships

2.1.4 ++++++

• Minor fixes.

2.1.3 ++++++

• role assignment: fix a recent regression that principalName is missing

2.1.2 ++++++

• support for stack profile 2017-03-09-profile

2.1.1 +++++

• ad app update: Fixes issue where generic update parameters would not work correctly.

2.1.0 +++++

• BREAKING CHANGE: 'show' commands log error message and fail with exit code of 3 upon a missing resource.

2.0.27 ++++++

• Minor fixes.

2.0.26 ++++++

• Minor fixes.

2.0.25 ++++++

• ad: remove stack traces from graph exceptions before surface to users
• ad sp create: do not throw if CLI can't resolve app id

2.0.24 ++++++

• ad app update: add generic update support

2.0.23 ++++++

• BREAKING CHANGE: remove deprecated az ad sp reset-credentials
• Minor fixes.

2.0.22 ++++++

• sdist is now compatible with wheel 0.31.0

2.0.21 ++++++

• graph: support required access configuration and native client
• rbac: ensure collection has less than 1000 ids on resolving graph objects
• ad sp: new commands to manage credentials "az ad sp credential reset/list/delete"
• role assignments: (breaking change)list/show output has "properties" removed to align with SDK
• role definition: support dataActions and notDataActions

2.0.20 ++++++

• role assignments: expose "role assignment list-changelogs" for rbac audit

2.0.18 ++++++

• ad app update: expose "--available-to-other-tenants"

2.0.17 ++++++

• role assignment: expose --assignee-object-id to bypass graph query

2.0.16 ++++++

• Update for CLI core changes.

2.0.15 ++++++

• role assignment list: show default assignments for classic administrators
• ad sp reset-credentials: support to add credentials instead of overwriting
• create-for-rbac: emit out an actionable error if provisioning application failed for lack of permissions

2.0.14 ++++++

• minor fixes

2.0.13 (2017-10-09) +++++++++++++++++++

• minor fixes

2.0.12 (2017-09-22) +++++++++++++++++++

• minor fixes

2.0.11 (2017-08-28) +++++++++++++++++++

• minor fixes

2.0.10 (2017-08-11) +++++++++++++++++++

• minor fixes

2.0.9 (2017-07-27) ++++++++++++++++++

• minor fixes

2.0.8 (2017-07-07) ++++++++++++++++++ create-for-rbac: support output in SDK auth file format

2.0.7 (2017-06-21) ++++++++++++++++++

• No changes.

2.0.6 (2017-06-13) ++++++++++++++++++

• rbac: clean up role assignments and related AAD application when delete a service principal (#3610)

2.0.5 (2017-05-30) ++++++++++++++++++

• ad: for 'app create' command, mention time format in the arg descriptions for --start-date/--end-date
• output deprecating information on using '--expanded-view'
• Add Key Vault integration to the create-for-rbac and reset-credentials commands.

2.0.4 (2017-05-09) ++++++++++++++++++

• Minor fixes.

2.0.3 (2017-04-28) ++++++++++++++++++

• create-for-rbac: ensure SP's end date will not exceed certificate's expiration date (#2989)
• RBAC: add full support for 'ad group' (#2016)

2.0.2 (2017-04-17) ++++++++++++++++++

• role: fix issues on role definition update (#2745)
• create-for-rbac: ensure user provided password is picked up

2.0.1 (2017-04-03) ++++++++++++++++++

• role: fix the error when supply role in guid format (#2667)
• Fix code style of azure-cli-role (#2608)
• rbac:catch more graph error (#2567)
• core: support login using service principal with a cert (#2457)

2.0.0 (2017-02-27) ++++++++++++++++++

• GA release.

0.1.2rc2 (2017-02-22) +++++++++++++++++++++

• Documentation updates.

0.1.2rc1 (2017-02-17) +++++++++++++++++++++

• Support --skip-assignment for 'az ad sp create-for-rbac'
• Show commands return empty string with exit code 0 for 404 responses

0.1.1b2 (2017-01-30) +++++++++++++++++++++

• Support Python 3.6.

0.1.1b1 (2017-01-17) +++++++++++++++++++++

• 'create-for-rbac' command accepts displayname.

0.1.0b11 (2016-12-12) +++++++++++++++++++++

• Preview release.