---
id: 4308
title: "Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/auditing-application-permissions-in-microsoft-entra-id-hidden-risks-pitfalls-and-quarkslabs-qazpt-tool.html"
published_at: "2026-04-29 22:00"
tags: ["cloud-security", "active-directory", "entra-id", "azure", "tooling", "oauth", "permissions"]
phying_url: "https://phying.com/item/4308"
lang: en
---

# Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool

## Summary

Quarkslab explains why auditing Microsoft Entra ID app permissions is hard — inheritance via ownership, groups and federation hides effective privileges — and introduces its open-source QAZPT tool.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2026-04-29 22:00
- **Original:** https://blog.quarkslab.com/auditing-application-permissions-in-microsoft-entra-id-hidden-risks-pitfalls-and-quarkslabs-qazpt-tool.html
- **Phying News:** https://phying.com/item/4308