rare valley
Hi guys,
This is about Entra ID PIM enabled groups specifically.
I am currently trying to retrieve all group assignments (eligible or active, doesn't matter) of a specific user. It seems the following commandlets only let you retrieve all assignments assigned to the user that is currently authenticated:
Get-MgIdentityGovernancePrivilegedAccessGroupEligibilitySchedule
Get-MgIdentityGovernancePrivilegedAccessGroupAssignmentSchedule
Using them like this on the principal ID that is currently authenticated (your own user) returns all e.g. eligible group assignments:
Get-MgIdentityGovernancePrivilegedAccessGroupEligibilitySchedule -Filter "principalId eq '$($PrincipalID)'"
If you try to retrieve the assignments of another user (principal ID) you get an 'Access denied'
At this point I'm clueless how to achieve this using powershell. Anyone here who might be able to help?
tepid yacht