---
id: 5776
title: "EntraGoat Scenario 2: Exploiting App-Only Graph Permissions in Entra ID"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/exploiting-app-only-graph-permissions-in-entra-id/"
published_at: "2025-08-05T22:23:26Z"
tags: ["privilege-escalation", "entra-id", "semperis", "microsoft-graph", "entragoat", "app-only-auth"]
phying_url: "https://phying.com/item/5776"
lang: en
---

# EntraGoat Scenario 2: Exploiting App-Only Graph Permissions in Entra ID

## Summary

EntraGoat Scenario 2: a certificate leaked through CI/CD artifacts leads to app-only Graph permission abuse — self-assigning RoleManagement.ReadWrite.Directory and resetting the Global Admin password.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-08-05T22:23:26Z
- **Original:** https://www.semperis.com/blog/exploiting-app-only-graph-permissions-in-entra-id/
- **Phying News:** https://phying.com/item/5776