I want to via powershell to make an Azure role (Network Contributor) eligible in PIM under a specific scope (tenant root group actually).
I can assign normal entra roles (global admin) as eligible using:
New-MgRoleManagementDirectoryRoleEligibilityScheduleRequest
But what is the equivalent for azure roles?
I have tried New-MgRoleManagementDirectoryRoleEligibilityScheduleRequest and New-AzRoleAssignment (but could not get it to work)
New contributor
GojiraAzure is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.