As I am implementing many Conditional Access Policies and scope them to specific roles, I want to know which admins will be effected, in advance. But I am too lazy to go through all roles by hand, so I wrote following script: Nothing too fancy, but re-usable. But be aware: Roles “eligable” via PIM “eligable” Read more about AzureAD / M365 – View all active role assignments[…]