Skip to content
Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool
blog.quarkslab.com | research | #cloud-security | #active-directory | #entra-id | #azure | #tooling | #oauth | #permissions
Summary
Quarkslab explains why auditing Microsoft Entra ID app permissions is hard — inheritance via ownership, groups and federation hides effective privileges — and introduces its open-source QAZPT tool.
- Published
- Collected