How to remove eligible PIM roles

[ArmaanMcleod]

How does one remove an eligible PIM role with the below cmdlets:

CommandType     Name                                               Version    Source
-----------     ----                                               -------    ------
Function        Get-AzRoleEligibilityScheduleRequest               6.5.1      Az.Resources
Function        New-AzRoleEligibilityScheduleRequest               6.5.1      Az.Resources
Function        Stop-AzRoleEligibilityScheduleRequest              6.5.1      Az.Resources

Recently removed a eligible PIM role via the portal, but when running New-AzRoleEligibilityScheduleRequest -RequestType 'AdminRemove' I get the below error:

New-AzRoleEligibilityScheduleRequest_CreateExpanded: Expected '{' or '['. Was String: A role assignment request with Id: 00000000-0000-0000-0000-000000000000 already exists.

The roles show up with Get-AzRoleEligibilityScheduleRequest so not sure what I'm doing wrong here, is there another cmdlet I should be using? The assignments were creating with request type AdminAssign.

Appreciate the support 🙂

[dingmeng-xue]

@ArmaanMcleod , could you provide the log when you execute New-AzRoleEligibilityScheduleRequest and Get-AzRoleEligibilityScheduleRequest? The log can be turn on via setting $DebugPreference = "Continue".

[TheFairey]

Did you ever resolve this? I'm getting the same issue :-(

[TheFairey]

Ok fixed it...the MS Docs could be clearer I guess :-)

When doing AdminRemove you must create a brand new GUID for Name, IT IS NOT the GUID for the original request as it doesn't remove or change the status of the original assignment request rather it creates another assignment request with a status of revoked.

On reflection given these are requests I guess it makes sense that you create a new one but was frustrating as hell to work out, hope this helps someone else!