Skip to content

New Upstream GitHub Release Available #69

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cae-pr-creator wants to merge 4 commits into
base: master
Choose a base branch
from
Open

New Upstream GitHub Release Available #69

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
c2fe635
New Upstream GitHub Release Available
actions-user May 21, 2025
5e722d3
New Upstream GitHub Release Available
actions-user May 22, 2025
b1ff778
New Upstream GitHub Release Available
actions-user May 27, 2025
6272e16
New Upstream GitHub Release Available
actions-user May 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 17 additions & 4 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,11 +86,24 @@ Azure Architecture Center (Landing zones): [Azure Governance Visualizer deployme

## Release history

**Changes** (2026-May-18 / 6.7.3 Patch)

- fix issue 294; retirement Classic Administrators

**Changes** (2025-May-21 / 6.7.2 Patch)

- use [AzAPICall](https://aka.ms/AzAPICall) PowerShell module version 1.4.1 (previous 1.4.0). Handle token refresh for OIDC in Azure Devops and GitHub Actions fix

**Changes** (2025-May-20 / 6.7.1 Patch)

- use [AzAPICall](https://aka.ms/AzAPICall) PowerShell module version 1.4.0 (previous 1.2.4). Handle token refresh for OIDC in Azure Devops and GitHub Actions

**Changes** (2025-May-19 / 6.7.0 Minor)

- New feature "ALZ Policy Assignments Checker" - This new view, will compare the current deployed ALZ hierarchy with the ALZ archetypes definitions and point out the missing policy assignments. It will also reference the missing policy assignments' payloads and [AzAdvertizer](https://www.azadvertizer.net/) links.
- New switch-parameter `-ALZPolicyAssignmentsChecker` - Execute the ALZPolicyAssignmentsChecker feature
- New Parameter `-ALZManagementGroupsIds` - Provide the Management Group Ids of the deployed ALZ hierarchy (more details: [Parameters](#parameters))
- [techcommunity blog post](https://techcommunity.microsoft.com/blog/azuregovernanceandmanagementblog/keep-your-azure-landing-zones-policy-assignments-up-to-date-with-azure-governanc/4292789)

[Full release history](history.md)

Expand All @@ -108,6 +121,7 @@ More [demo output](https://github.com/JulianHayward/AzGovViz)
- Microsoft Dev Radio (YouTube) [Get visibility into your environment with Azure Governance Visualizer](https://www.youtube.com/watch?v=hZXvF5oypLE)
- Jack Tracey (Cloud Solution Architect Microsoft) [Azure Governance Visualizer With Azure DevOps](https://jacktracey.co.uk/azgovviz-with-azure-devops/)
- SCHUTTEN.CLOUD [Automate Pertinent Governance Insight with Azure Governance Visualizer](https://schutten.cloud/post/azure-governance-visualizer/)
- DEVOPS masterminds [Indispensable Azure Tools: Azure Governance Visualizer (AzGovViz) for Governance Excellence](https://devopsmasterminds.com/technical-blog-posts-devops-masterminds/indispensable-azure-tools-azure-governance-visualizer-azgovviz-for-governance-excellence/)

### Presentations

Expand Down Expand Up @@ -185,7 +199,6 @@ Short presentation on Azure Governance Visualizer: [download](slides/AzGovViz_in
- PIM (Privileged Identity Management) eligibility for role assignments
- Get a full report of all PIM eligible role assignments for Management Groups and subscriptions, including resolved user members of Microsoft Entra ID groups that have assigned eligibility
- 💡 Note: this feature requires you to execute as service principal with `Application` API permission `PrivilegedAccess.Read.AzureResources`
- Role assignments ClassicAdministrators
- Security & best practice analysis
- Existence of custom role definition that reflect 'Owner' permissions
- Report all role definitions that are capable to write role assignments, list all role assignments for those role definitions
Expand Down Expand Up @@ -547,7 +560,7 @@ Screenshot of Microsoft Graph permissions in the Microsoft Entra admin center
- `-NoNetwork` - Do not execute Network analysis / Virtual Network and Virtual Network Peerings
- `-NetworkSubnetIPAddressUsageCriticalPercentage` - Warning level when certain percentage of IP addresses is used (default = 90%)
- `-TenantId4AzContext` - Define the Tenant Id to use for AzContext (default is to use the Tenant Id from the current context)
- `-ALZPolicyAssignmentsChecker` - Execute the 'Azure Landing Zones (ALZ) Policy Assignments Checker' feature
- `-ALZPolicyAssignmentsChecker` - Execute the 'Azure Landing Zones (ALZ) Policy Assignments Checker' feature. [techcommunity blog post](https://techcommunity.microsoft.com/blog/azuregovernanceandmanagementblog/keep-your-azure-landing-zones-policy-assignments-up-to-date-with-azure-governanc/4292789)
- `-ALZManagementGroupsIds` - if your Management Group (MG) structure deviates from the ALZ defaults, then you will need to map your MG structure to the default ALZ structure. If your MG structure does not deviate from the ALZ defaults then you do not need to define this parameter

_example:_
Expand All @@ -561,7 +574,7 @@ _example:_
landing_zones = '<Landing_zones Management Group Id>'
corp = '<Corp Management Group Id>'
online = '<Online Management Group Id>'
sandboxes = '<Sandboxes Management Group Id>'
sandbox = '<Sandbox Management Group Id>'
decommissioned = '<Decommissioned Management Group Id>'
}
```
Expand Down Expand Up @@ -768,7 +781,7 @@ git config --system core.longpaths true

## Facts

Disabled Azure subscriptions and subscriptions where Quota ID starts with with "AAD\_" are being skipped, all others are queried. More information on Subscription Quota ID / Offer numbers: [Supported Microsoft Azure offers](https://learn.microsoft.com/azure/cost-management-billing/costs/understand-cost-mgt-data#supported-microsoft-azure-offers).
Disabled Azure subscriptions and subscriptions where Quota ID starts with "AAD\_" are being skipped, all others are queried. More information on Subscription Quota ID / Offer numbers: [Supported Microsoft Azure offers](https://learn.microsoft.com/azure/cost-management-billing/costs/understand-cost-mgt-data#supported-microsoft-azure-offers).

ARM Limits are not acquired programmatically, these are hardcoded. The links used to check related limits are commented in the param section of the script.

Expand Down
12 changes: 12 additions & 0 deletions history.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,18 @@

### Azure Governance Visualizer version 6

**Changes** (2026-May-18 / 6.7.3 Patch)

- fix issue 294; retirement Classic Administrators

**Changes** (2025-May-21 / 6.7.2 Patch)

- use [AzAPICall](https://aka.ms/AzAPICall) PowerShell module version 1.4.1 (previous 1.4.0). Handle token refresh for OIDC in Azure Devops and GitHub Actions fix

**Changes** (2025-May-20 / 6.7.1 Patch)

- use [AzAPICall](https://aka.ms/AzAPICall) PowerShell module version 1.4.0 (previous 1.2.4). Handle token refresh for OIDC in Azure Devops and GitHub Actions

**Changes** (2025-May-19 / 6.7.0 Minor)

- New feature "ALZ Policy Assignments Checker" - This new view, will compare the current deployed ALZ hierarchy with the ALZ archetypes definitions and point out the missing policy assignments. It will also reference the missing policy assignments' payloads and [AzAdvertizer](https://www.azadvertizer.net/) links.
Expand Down
Loading
Loading