azure-graphrbac

import os from msrestazure.azure_active_directory import ServicePrincipalCredentials from azure.graphrbac import GraphRbacManagementClient tenant_id = os.environ.get('AZURE_TENANT_ID', '') client_id = os.environ.get('AZURE_CLIENT_ID', '') client_secret = os.environ.get('AZURE_CLIENT_SECRET', '') if not all([tenant_id, client_id, client_secret]): print("Please set AZURE_TENANT_ID, AZURE_CLIENT_ID, and AZURE_CLIENT_SECRET environment variables.") else: try: # Authenticate using Service Principal Credentials credentials = ServicePrincipalCredentials( client_id=client_id, secret=client_secret, tenant=tenant_id ) # Create the Graph RBAC client graph_client = GraphRbacManagementClient(credentials, tenant_id) # Example: List users (will only work if service principal has sufficient permissions) print("Listing first 5 users...") users = list(graph_client.users.list())[:5] if users: for user in users: print(f" User ID: {user.object_id}, Display Name: {user.display_name}") else: print("No users found or insufficient permissions.") except Exception as e: print(f"An error occurred: {e}")