ricmik/azuread-privilegedaccessgroups

azuread-privilegedaccessgroups's Issues

Not actually an issue, a question

Hey there @ricmik,

Sorry to open an issue but hoping to get a hold of you. I'm doing a lot of PowerShell PIM work right now and have run into a blocker I was hoping to get your opinion on. Use Dev tools I also discovered in the past the "https://api.azrbac.mspim.azure.com" endpoint.

I was able to pull down a token for it using your scripts, but I'm specifically trying to take advantage of the below call:

https://api.azrbac.mspim.azure.com/api/v2/privilegedAccess/azureResources/roleAssignments/exportWithChildren?`$expand=subject,roleDefinition(`$expand=resource)&`$filter=(roleDefinition/resource/id eq 'xxxxxx-xxxxxx-xxxxxx')

If you go to PIM > Azure Resources > select any resource > Assignments > Export > select Export all members, it makes the above call.

The problem is even after grabbing the token I'm not able to successfully complete this call "Attempted to perform an unauthorized operation". There's currently no way to make that same call via a PowerShell cmdlet directly, and I figured this was some internal API originally and couldn't be used. So seeing your repo was a game changer for me.

Do you have any pointers or tips? Happy to take this off Github, thought this was worth a shot. Sorry and thanks again.