How to find list of enterprise applications which an AD group can access

436 Views Asked by At

Is there a way through which we can find the list of Enterprise Applications which an AD group can access?

I see the option in the Azure Portal which lets me see this, but there's no AzCLI or Terraform module which can list this down.

Picture for reference in the Azure Portal

1

There are 1 best solutions below

1
Mukund Bajaj On BEST ANSWER

Found a command in PowerShell for reference - would still await for any alternatives if possible.

Get-AzureADGroupAppRoleAssignment -ObjectId <objectId>. ObjectID can be found from the Group in Azure AD, or we can use the following to get the data:

$GroupId = Get-AzureADMSGroup -SearchString "<groupName>" | Select-Object Id -ExpandProperty Id
Get-AzureADGroupAppRoleAssignment -ObjectId $GroupId 

Requires Install-Module AzureAD and Connect-AzureAD to be executed before running this.