Resource enumeration

---

Authenticated

---

List available resources for your user

az resource list

or with curl

SubscriptionId='<TENANTID>'
ResourceUrl="https://management.azure.com/subscriptions/$SubscriptionId/resources"
accesstoken='jwtaccesstoken'

curl -X GET "${ResourceUrl}?api-version=2020-06-01" \
-H "Authorization: Bearer $accesstoken" \
-H "Content-Type: application/json"

Check resources your user owns

Get-MgUserOwnedObject -UserId "user.one@domain.com"

Check resources your user as "reader" or greater access to

Get-AzResource

Check specific permissions.

Get-AzRoleAssignment -SignInName user.one@domain.com