I'm having a hard time pulling PIM assignments for every child resource within a subscription in Azure.
I'm currently using Get-AzureADMSPrivilegedRoleAssignment from the AzureADPreview module, like below:
$allRolesSingleSubAssignment = Get-AzureADMSPrivilegedRoleAssignment -ProviderId AzureResources -ResourceId $sub.Id
This is returning everything at the provided -ResourceId level, which in my case is a subscription. However, I'm trying to return the PIM assignments for everything that is a child resource of that sub as well, exactly how it allows you to do in the portal, as in the screenshot below.
Whereas currently the command I shared above is providing only the first option "Export members only in this subscription". I'm a bit at a loss here and am wondering if it's not available via PowerShell? I'd prefer to be able to pull this via PowerShell if possible, but would appreciate any suggestions direct from the Graph side as well.
So far I haven't been able to find a way to pull what I'm looking for, so any help or tips is much appreciated!