Check Lighthouse assignments with Azure CLI

If you want to check Azure Lightouse assignments on a subscription, you can use the following commands:

az login --tenant <tenant_uri>
az account set -s "<subscription_name>"
az managedservices assignment list
az managedservices definition show --definition <assigment_name>

The output can be tricky to read:

But you just have to get the assignment name (uuid format) to get a more friendly output.

Azure role IDs can be found in Microsoft documentation: https://docs.microsoft.com/fr-fr/azure/role-based-access-control/built-in-roles