Privilege escalation using Azure App Registration and Microsoft Graph
·6 mins
Azure App Registrations are often used as system identities that have access to API’s. Microsoft Graph is one of these API’s that are often used and has application roles that are high privileged and can be abused by an attacker to escalate privileges.