az ad command group for role is missing

[avbhaskar]

command group for managing ad roles is missing from Azure CLI. It would be really useful to have a command group like so:

az ad role: Manage Azure AD roles

commands:

list: List of roles in in Azure Active Directory create: Create a custom role in Azure Active Directory delete: Delete a custom role in Azure Active Directory enable: Enable in Azure Active Directory show: show details of role in Azure Active Directory

subgroups:

assignment:

create: create new assignment for a role in in Azure Active Directory - object-id, user, group, principal list: list assignments for a role in in Azure Active Directory delete: Delete a assignment from role in in Azure Active Directory show: Show details of a role assignment in Azure Active Directory

Equivalent Powershell module AzurAD has commands like so: Add-AzureADDirectoryRoleMember Enable-AzureADDirectoryRole Get-AzureADDirectoryRole Get-AzureADDirectoryRoleMember Get-AzureADDirectoryRoleTemplate Remove-AzureADDirectoryRoleMember

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: aa048db2-b924-889c-c105-2a676714b0ee
• Version Independent ID: 5774d883-1b16-d4b9-8d61-4694af8d9341
• Content: az ad
• Content Source: src/azure-cli/azure/cli/command_modules/role/_help.py
• Service: active-directory
• GitHub Login: @rloutlaw
• Microsoft Alias: routlaw

[yonzhan]

@arrownj please take a look

[yungezz]

hi @arrownj pls evaluate the work and let's sync.

[jiasli]

The equivalent of Azure CLI az ad command group is AzAD from Azure PowerShell. AzureAD on the other hand is a module developed by Azure Active Directory.

az ad commands are designed and implemented to assist integrating AAD with Azure, instead of as a fully functioning client to interact with AAD. You may use az rest with Microsoft Graph API to manipulate those properties. See https://github.com/Azure/azure-cli/issues/12946 for examples.

[ghost]

Hi, we're sending this friendly reminder because we haven't heard back from you in a while. We need more information about this issue to help address it. Please be sure to give us your input within the next 7 days. If we don't hear back from you within 14 days of this comment the issue will be automatically closed. Thank you!