Reader role assignment to registered application via powershell at subscription scope

Question

Trying to assign Reader role for application at subscription level using the following powershell command. but it gets failed

foreach ($Id in Get-AzSubscription)
{
    New-AzRoleAssignment -ObjectId '<Application-Object-Id>' -RoleDefinitionName "Reader" -Scope '/subscriptions/$Id'
}

getting this error "New-AzRoleAssignment: Operation returned an invalid status code 'BadRequest'"

Answer 1

Please try by changing your code to:

foreach ($subscription in Get-AzSubscription)
{
    New-AzRoleAssignment -ObjectId '<Application-Object-Id>' -RoleDefinitionName "Reader" -Scope '/subscriptions/$subscription.Id'
}

Essentially the issue with your code was that $Id variable is an object of type Microsoft.Azure.Commands.Profile.Models.PSAzureSubscription which contains information about the subscription and not just the subscription id.