要在企业应用程序下的Azure中筛选、排序、导出用户和组，您可以使用PowerShell脚本，因为无法通过Azure门户执行此操作。

获取用户和组的详细信息：

Get-AzureADServicePrincipal -searchstring "aadapp-manage" | % {

    $appRoles = @{ "$([Guid]::Empty.ToString())" = "(default)" }
  $_.AppRoles | % { $appRoles[$_.Id] = $_.DisplayName }

    Get-AzureADServiceAppRoleAssignment -ObjectId ($_.ObjectId) | % {
    $_ | Add-Member "AppRoleDisplayName" $appRoles[$_.Id] -Passthru
  }
} | ft resourcedisplayname,principaldisplayname, approledisplayname,creationtimestamp

字符串

的数据

按角色过滤列表，请使用以下脚本：

Get-AzureADServicePrincipal -searchstring "aadapp-manage" | % {

  $appRoles = @{ "$([Guid]::Empty.ToString())" = "(default)" }
  $_.AppRoles | % { $appRoles[$_.Id] = $_.DisplayName }

    Get-AzureADServiceAppRoleAssignment -ObjectId ($_.ObjectId) | % {
    $_ | Add-Member "AppRoleDisplayName" $appRoles[$_.Id] -Passthru
  }
} | Where-Object { $_.AppRoleDisplayName -eq "test.read1" } | ft resourcedisplayname,principaldisplayname, approledisplayname,creationtimestamp

型

的

若要按名称对列表进行排序并获取Object类型，请使用以下脚本：

Get-AzureADServicePrincipal -searchstring "aadapp-manage" | % {

  $appRoles = @{ "$([Guid]::Empty.ToString())" = "(default)" }
  $_.AppRoles | % { $appRoles[$_.Id] = $_.DisplayName }

  Get-AzureADServiceAppRoleAssignment -ObjectId ($_.ObjectId) | % {

   $principal = Get-AzureADObjectByObjectId -ObjectId $_.PrincipalId
      
    [PSCustomObject]@{
        ResourceDisplayName = $_.ResourceDisplayName
        PrincipalDisplayName = $_.PrincipalDisplayName
        AppRoleDisplayName = $appRoles[$_.Id]
        CreationTimestamp = $_.CreationTimestamp
        PrincipalType = $principal.ObjectType
    }
  }
} | Sort-Object -Property PrincipalDisplayName | ft

型

的

若要按对象类型过滤，请使用以下脚本：

Get-AzureADServicePrincipal -searchstring "aadapp-manage" | % {

  $appRoles = @{ "$([Guid]::Empty.ToString())" = "(default)" }
  $_.AppRoles | % { $appRoles[$_.Id] = $_.DisplayName }

  Get-AzureADServiceAppRoleAssignment -ObjectId ($_.ObjectId) | % {

   $principal = Get-AzureADObjectByObjectId -ObjectId $_.PrincipalId

   # Filter by PrincipalType
   if ($principal.ObjectType -eq "User") {
    [PSCustomObject]@{
        ResourceDisplayName = $_.ResourceDisplayName
        PrincipalDisplayName = $_.PrincipalDisplayName
        AppRoleDisplayName = $appRoles[$_.Id]
        CreationTimestamp = $_.CreationTimestamp
        PrincipalType = $principal.ObjectType
    }
   }
  }
} | ft

型

的