azure_mgmt_authorization_client_list_role_definitions.py

1import os
2from azure.identity import DefaultAzureCredential
3from azure.mgmt.authorization import AuthorizationManagementClient
4
5def main():
6    # Substitution of your Azure subscription ID
7    subscription_id = os.environ.get("AZURE_SUBSCRIPTION_ID", "12345678-1234-1234-1234-123456789012")
8
9    # Authenticate using DefaultAzureCredential
10    # This requires environment variables: AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET
11    credential = DefaultAzureCredential()
12
13    # Create the Authorization Management Client
14    client = AuthorizationManagementClient(
15        credential=credential,
16        subscription_id=subscription_id
17    )
18
19    # List role definitions for the subscription
20    print("Listing role definitions:")
21    scope = f"/subscriptions/{subscription_id}"
22    role_definitions = client.role_definitions.list(scope=scope)
23
24    for role in role_definitions:
25        print(f"Role Name: {role.role_name}")
26        print(f"Role ID: {role.id}")
27        print("-" * 30)
28
29if __name__ == "__main__":
30    main()