I am not a fan of Azure (and am DEFINITELY not a fan of their RBAC/auth model), but graphing and querying one's entire set of resources is one thing they got right. One can run a Kusto query against Azure AD to obtain the same information.

While you _can_ do it with the Azure REST API (and their various SDKs that leverage it), the easiest way to do it is via `az graph query` in the Azure CLI.

Here's the link to documentation describing how to do this since it's insanely hard to find: https://docs.microsoft.com/en-us/azure/governance/resource-g...

That said, Cartography looks awesome and is probably better to use anyway. Awesome stuff, Lyft!