Get-AzRoleAssignment

Use Get-AzRoleAssignment to query Azure role assignments by identity, scope and role. See Az module requirements and examples.

Command 1 min read Windows PowerShell 5.1 and PowerShell 7

Documentation: Microsoft Learn — Get-AzRoleAssignment

Written and tested by Dhrub Bharali · Updated 02 October 2026

Common usage

Get-AzRoleAssignment -ErrorAction Stop

This is a usage example, not the complete parameter-set reference. Follow Microsoft Learn below for supported parameters and version details.

See the command anatomy

Read the command and its supplied arguments. This example requires real PowerShell or its module; this diagram does not execute it.

Get-AzRoleAssignment -ErrorAction Stop

Stage 1Get-AzRoleAssignment-ErrorAction

Try it

Windows PowerShell

PowerShell example · browser support is limited.

Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.

Command

Interactive simulation · fictional data

Examples

Get-AzRoleAssignment -ErrorAction Stop

1Get-AzRoleAssignment -ErrorAction Stop

Show reference output

Sample output · fictional data, shaped like the real thing

DisplayName    RoleDefinitionName  Scope
-----------    ------------------  -----
Adele Vance    Reader              /subscriptions/1111...

Practical use and troubleshooting

Practical scenario: Use Get-AzRoleAssignment when you need to query Azure role assignments by identity, scope and role. Start with one identified target and inspect the returned values before extending the operation to a list. Keep the identity in your report so you can trace each result back to the object or path that produced it.

Common error and fix: An incomplete assignment inventory may result from insufficient read access or an overly narrow scope. Confirm the resource scope and account permissions before concluding an identity has no assigned role. In an unattended script, capture this failure with its original error record and record which target failed. An empty result and an unsuccessful query must remain distinguishable in the final report.

See also: Get-AzContext. Get-AzRoleAssignment reads Azure role-assignment records; Get-AzContext identifies the selected account and subscription. A role-assignment list is not a complete evaluation of every possible access condition. Read the linked command before substituting it; similar names do not imply identical inputs or output.

Get-AzRoleAssignment reference on Microsoft Learn

Recap

Get-AzRoleAssignment Use Get-AzRoleAssignment to query Azure role assignments by identity, scope and role. See Az module requirements and examples.

Next: Get-AzResourceGroup