Would it be possible to include Azure RBAC? That is an entirely different beast as role assignments can be at any scope, management groups, subscriptions, resource groups, resources. That is potentially 100.000s of different scopes.
These role assignments can be pulled via the Azure Resource Graph, but will have to somehow check if the assignment is via PIM or not.
Would it be possible to include Azure RBAC? That is an entirely different beast as role assignments can be at any scope, management groups, subscriptions, resource groups, resources. That is potentially 100.000s of different scopes.
These role assignments can be pulled via the Azure Resource Graph, but will have to somehow check if the assignment is via PIM or not.