Add Azure test for User Access Administrator

[Oppedijk]

No description provided.

[moorereason]

Requesting some minor changes from a quick proofread.

[merill]

@Oppedijk This is a good test to include. Thanks for the PR.

In addition to the formatting details above, there are some changes we need to make to best align with the existing tests.

• Move Test-MtUserAccessAdmin.ps1 and Test-MtUserAccessAdmin.md to /powershell/public/maester/azure (we'll need to create a new folder called azure)
• Switch to using the Rest API instead of the cli (this will reduce dependencies on additional az modules for commands that have a rest api). We already include Az.Accounts module in Maester so the Invoke-AzRestMethod should work.

Invoke-AzRestMethod -Path "/providers/Microsoft.Authorization/roleDefinitions?api-version=2022-04-01&`$filter=roleName+eq+'User Access Administrator'"

Thanks!

[Oppedijk]

@Oppedijk This is a good test to include. Thanks for the PR.

In addition to the formatting details above, there are some changes we need to make to best align with the existing tests.

• Move Test-MtUserAccessAdmin.ps1 and Test-MtUserAccessAdmin.md to /powershell/public/maester/azure (we'll need to create a new folder called azure)
• Switch to using the Rest API instead of the cli (this will reduce dependencies on additional az modules for commands that have a rest api). We already include Az.Accounts module in Maester so the Invoke-AzRestMethod should work.

Invoke-AzRestMethod -Path "/providers/Microsoft.Authorization/roleDefinitions?api-version=2022-04-01&`$filter=roleName+eq+'User Access Administrator'"

Thanks!

I will take a look, however that will complicate things, as it will be harder to detect the permission denied, as this will list all roles on all levels?
If someone has no permission on the root scope, this will probably return an empty array?

I will do some testing and let you know.

[Oppedijk]

@merill can you take a look at the current setup, I've used the Get-AzRoleAssignment, as I need to look up the assigned permissions at the root scope.

[moorereason]

I can't resolve the conversations related to my previous review, but it looks like those issues are fixed.

[merill]

@Oppedijk I had some time and was able to find the right filter and made the switch.

Can you please check and verify?

[merill]

Thanks @Oppedijk for adding this new test and @moorereason + @SamErde for helping improve!