使用“未找到身份”查找角色分配的可靠方法是什么？ 在 Azure 和 Powershell 上？

Question

If you assign a role in Azure and later delete the identity before you delete the role assignment, you wind up with an "Identity not found." condition. It's harmless, but it takes up a role assignment slot and clutters the role assignments list. I would like to find and delete these.

I am thinking that this:

Get-AzRoleAssignment | Where-object -Property Displayname -eq $null

...will get me those roles without an associated identity, and it seems to work, but the Azure docs don't really create much of an assurance that this will cover all cases.

Should I add something else to this? Or is there a better way of finding these roles assignments?

Answer 1

Turns out this is the way to identify these orphaned role assignments, albeit indirectly. However, you will not be able to remove these orphaned role assignments unless you have the permission to get to all of them.