Viewing Resources Across Multiple Azure Subscriptions | Contoso.com

List of Azure Resources Across 100 Subscriptions | Global Administrator

Prev Question Next Question

Question

You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active Directory (Azure AD) tenant named contoso.com.

You are a global administrator.

You plan to create a report that lists all the resources across all the subscriptions.

You need to ensure that you can view all the resources in all the subscriptions.

What should you do?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C

The New-AzureADUserAppRoleAssignment cmdlet assigns a user to an application role in Azure Active Directory (AD). Use it for the application report.

https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureaduserapproleassignment?view=azureadps-2.0

The correct answer for this question is to use option D: From the Azure portal, modify the properties of the Azure AD tenant.

To be able to view all resources across all subscriptions, you need to have sufficient permissions to access all subscriptions. As a global administrator of the Azure AD tenant that is associated with all subscriptions, you have the required permissions.

To ensure that you can view all the resources, you can modify the properties of the Azure AD tenant by following these steps:

  1. Sign in to the Azure portal (https://portal.azure.com/) with your global administrator credentials.
  2. In the left navigation pane, click on Azure Active Directory.
  3. Under the Manage section, click on Properties.
  4. Under the Access management for Azure resources section, change the option for Users can consent to apps accessing company data on their behalf to Yes.
  5. Click Save.

After you make this change, you will be able to view all the resources across all subscriptions by using the Azure portal or Azure PowerShell. You can use the Azure Resource Graph Explorer to search for resources across multiple subscriptions, or you can use Azure PowerShell cmdlets like Get-AzSubscription and Get-AzResource to retrieve information about resources.

Note that this change allows users in your Azure AD tenant to consent to apps accessing company data on their behalf. If this is not desirable, you can revoke the permission by setting the option back to No.

Prev Question Next Question