Get-AzContext doesn't always grab the UPN

[FallenHoot]

Description

This might be a duplicate, but creating it for an issue tracker product. Azure/Azure-Landing-Zones#3230

Get-AzContext doesn't always grab the UPN.

#13797

Steps to reproduce

#sign in to Azure  from Powershell, this will redirect you to a web browser for authentication, if required
Connect-AzAccount

Get the UPN from this:
(Get-AzContext).Account

(Get-AzContext).Account.Id
``

[dingmeng-xue]

Thanks for reporting. The account name may be different from UPN. We didn't find clear rule between account id for login and UPN from AAD graph or MSGraph. Is there any official doc?

[FallenHoot]

The only docs I see is the following:
https://docs.microsoft.com/en-us/powershell/module/az.accounts/get-azcontext?view=azps-6.0.0

It looks to be a legacy issue with Get-AzureRmSubscription
#1665

I have asked several people to see if they can reproduce this, but everything works as normal. It might be an issue with Service Principles or Guest Accounts. Will verify with (Get-AzContext).Account.Type

I was told this method works in Bash with no issue.

#sign  into AZ CLI, this will redirect you to a web browser for authentication, if required
az login

#assign Owner role to Tenant root scope  ("/") as a Owner (gets object Id of the current user (az login))
az role assignment create --scope '/'  --role 'Owner' --assignee-object-id $(az ad signed-in-user show --query  objectId)

[dingmeng-xue]

Our proposal is Get-AzAdUser -SignedInUser returns current signed in user. It should call /{tenantID}/me
https://github.com/Azure/azure-rest-api-specs/blob/c059fb47f87a35ce5a90631883dfba8f01a41d8e/specification/graphrbac/data-plane/Microsoft.GraphRbac/stable/1.6/graphrbac.json#L39