Garrard.AzureLib 0.0.6

Garrard.AzureLib

Garrard.AzureLib is a .NET library that provides operations for working with Azure resources.

Installation

To install Garrard.AzureLib, you can use the NuGet package manager. Run the following command in the Package Manager Console:

Install-Package Garrard.AzureLib -Version 0.0.6

Or add the following package reference to your project file:

<PackageReference Include="Garrard.AzureLib" Version="0.0.6" />

Or use the dotnet add command:

dotnet add package Garrard.AzureLib --version 0.0.6

Usage

Here is an example of how to use Garrard.AzureLib in your project:

using Garrard.AzureLib;

class Program
{
    static async Task Main(string[] args)
    {
        // Installs missing dependencies
        
        await Helpers.CheckAndInstallDependenciesAsync(Console.WriteLine);
        var credentialsResult = await EntraIdOperations.ObtainAzureCredentialsAsync(Console.WriteLine);
        if (credentialsResult.IsFailure)
        {
            Console.WriteLine(credentialsResult.Error);
            return;
        }

        // checks if SP has Directory.ReadWrite.All access. Exists early if user and not SP.
        
        var checkDirectoryReadWriteAllAccessAsync = await EntraIdOperations.CheckIfServicePrincipalHasDirectoryReadWriteAllAccessAsync(Console.WriteLine);
        if (checkDirectoryReadWriteAllAccessAsync.IsFailure)
        {
            Console.WriteLine(checkDirectoryReadWriteAllAccessAsync.Error);
            return;
        }

        var (subscriptionId, tenantId, billingAccountId, enrollmentAccountId, spnName) = credentialsResult.Value;
        string groupName = "example-group";
        string scope = "/";
        Result<string> clientIdResult = await EntraIdOperations.GetClientIdAsync(spnName, Console.WriteLine);
        if (clientIdResult.IsFailure)
        {
            Console.WriteLine(clientIdResult.Error);
            return;
        }
        string clientId = clientIdResult.Value;
        await EntraIdOperations.AssignSubscriptionCreatorRoleAsync(clientId, tenantId, billingAccountId, enrollmentAccountId, Console.WriteLine);
        await EntraIdOperations.CreateGroupAsync(groupName, Console.WriteLine);
        await EntraIdOperations.AddSpToGroupAsync(spnName, groupName, clientId, Console.WriteLine);
        await EntraIdOperations.AssignOwnerRoleToGroupAsync(groupName, clientId, scope, Console.WriteLine);
        await EntraIdOperations.AddApiPermissionAsync(clientId, ApiPermissions.APPLICATION_READWRITE_ALL);
        var apiPermissionsResult = await EntraIdOperations.AddApiPermissionsAsync(clientId, Console.WriteLine);
        if (apiPermissionsResult.IsFailure)
        {
            Console.WriteLine(apiPermissionsResult.Error);
        }

         var isGlobalAdministratorAsync = await Garrard.AzureLib.EntraIdOperations.IsGlobalAdministratorAsync(Console.WriteLine);

        if (isGlobalAdministratorAsync.IsFailure)
        {
            Console.WriteLine(isGlobalAdministratorAsync.Error);
        }
    }
}

Features

• Check and install dependencies
• Obtain Azure credentials
• Get client ID
• Assign Subscription Creator Role to Service Principal (Required for EA and Subscription Vending)
  • Your User Security Principal first needs to be assinged as Billing Administrator for your Tenant.
• Create an EntraID Group
• Add Service Principal to a EntraID Group
• Assign Owner Role to EntraID Group
• Assign a Role to an EntraID Group
• Add API permissions
• Grant Admin Consent to Service Principal
• Checks if the Service Principal has Directory.ReadWrite.All permission
• Checks if the current user is a Global Administrator

Contributing

Contributions are welcome! Please open an issue or submit a pull request on GitHub.

License

This project is licensed under the MIT License. See the LICENSE file for more details.