Azure.Admin.Console

0.14.0

Azure admin reports and checks from PowerShell, over plain REST - no Az or Microsoft.Graph modules, no app registration. Get-AACAdvisorRecommendation: a consolidated, flattened Azure Advisor view (Cost, Security, Reliability, Operational excellence, Performance). Get-AACFirewallRule: every Azure Firewall Policy rule, searchable by source, destination, port and protoco
Azure admin reports and checks from PowerShell, over plain REST - no Az or Microsoft.Graph modules, no app registration. Get-AACAdvisorRecommendation: a consolidated, flattened Azure Advisor view (Cost, Security, Reliability, Operational excellence, Performance). Get-AACFirewallRule: every Azure Firewall Policy rule, searchable by source, destination, port and protocol (Allow green, Deny red). Show-AACResource and Show-AACCost: your resources and subscription costs, with a full resource inventory. Invoke-AACPSRule: PSRule for Azure (500+ Well-Architected rules), the module's own rules and your custom rules on the live estate, with rules excluded by name or wildcard. Invoke-AACApplicationInsightQuery: Application Insights exceptions (or any KQL query) from a Log Analytics workspace or Application Insights resource, flattened. Get-AACInventory: the tenant as a tree (management groups, subscriptions, resource groups, resources) with Defender for Cloud secure scores and costs. Get-AACNetworkSecurityGroup: a detailed NSG assessment with findings by severity. Show-AACResourceMap: an interactive diagram of resource groups in the browser, saved as PNG or JPEG. Get-AACPolicyState: Azure Policy compliance for every resource, by management group, subscription or resource group. Get-AACSkuAvailability: which VM sizes you can use for VMs or AKS node pools in a region and its zones - restrictions, vCPU quota, AKS rules - and why not. Get-AACSecurityPosture: Defender for Cloud and Azure Policy - secure scores, recommendations, alerts, plans, regulatory and policy compliance. Get-AACEntraGroupMembership: Entra ID groups and everyone in them, nested groups included, one row per group and member (Microsoft Graph). Get-AACAssignedPolicy: every Azure Policy assignment with the default, assigned and effective value of each parameter and the resource types the policy applies to. Get-AACStorageAccountContainerSize: every blob container's size, access tiers and largest blobs, read in parallel. Every command: a colourful console view, objects, CSV and interactive HTML reports, and most a PDF. PDF export needs Windows and PowerShell 7.4+.
Show more

Minimum PowerShell version

7.2

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name Azure.Admin.Console -RequiredVersion 0.14.0

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name Azure.Admin.Console -Version 0.14.0

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2026 Chendrayan Venkatesan. Licensed under the MIT License.

Package Details

Author(s)

  • Chendrayan Venkatesan

Tags

Azure AzureAdvisor AzureFirewall CostManagement Inventory FirewallPolicy ResourceGraph Governance EntraID MicrosoftGraph Groups DefenderForCloud Storage BlobStorage AzurePolicy SecureScore Report PDF CSV ApplicationInsights LogAnalytics KQL PSRule WellArchitected HTML Compliance SpectreConsole REST PKCE Windows Linux MacOS

Functions

Connect-AAC Deploy-AACStorageAccount Disconnect-AAC Get-AACAdvisorRecommendation Get-AACAssignedPolicy Get-AACDiagnosticSetting Get-AACEntraGroupMembership Get-AACFirewallRule Get-AACInventory Get-AACNetworkSecurityGroup Get-AACPolicyState Get-AACSecurityPosture Get-AACSkuAvailability Get-AACStorageAccountContainerSize Get-AACTerraformPlan Invoke-AACAksAssessment Invoke-AACApplicationInsightQuery Invoke-AACAssessment Invoke-AACLogAnalyticsWorkspaceAssessment Invoke-AACPolicyAssessment Invoke-AACPSRule Invoke-AACVirtualNetworkAssessment Show-AACCost Show-AACResource Show-AACResourceMap

PSEditions

Core

Dependencies

Release Notes

v0.14.0 - NEW Invoke-AACPolicyAssessment: Azure Policy assessed as a whole (in the spirit of AzPolicyLens) - compliance at each resource's worst state, overall and by subscription, management group, assignment, policy and category; exemptions and their expiry; managed identities and their roles; findings with what to do; Platform and Application audiences; console, objects, CSV, PDF and HTML with the management group tree. NEW Invoke-AACAksAssessment: AKS clusters through every lens - current settings, about 35 Well-Architected checks scored per pillar, PSRule for Azure, Azure Policy for Kubernetes by namespace, workload, policy and cluster (Gatekeeper's complete counts with -IncludeConstraint), versions and upgrades, Advisor and Defender. NEW Invoke-AACAssessment: an Azure environment inventory in the spirit of Azure Resource Inventory - about 95 resource types, Advisor, Defender, Policy, cost, quotas; CSV, HTML, PDF and interactive diagrams; Azure Automation and blob upload. NEW Invoke-AACVirtualNetworkAssessment, Invoke-AACLogAnalyticsWorkspaceAssessment, Get-AACDiagnosticSetting, Get-AACTerraformPlan and Deploy-AACStorageAccount. Connect-AAC: -DeviceCode, service principals (-ClientSecret, -CertificatePath, -CertificateThumbprint) and -Identity (managed identity). HTML reports group tables into sections with contents and collapse them; PDFs have bookmarks. Fixes: Resource Graph errors show the real reason; KQL keyword properties are bracketed. Full history: CHANGELOG.md.

FileList

Version History

Version Downloads Last updated
0.14.1 8 10/7/2026
0.14.0 (current version) 9 10/5/2026
0.13.0 11 10/1/2026
0.12.0 9 9/28/2026
0.11.0 10 9/27/2026