AZT106.1 - Gather Role Information: Gather AzureAD Role Assignments

An adversary may gather role assignments within Azure Active Directory.

Resource

Azure Active Directory

Actions

• microsoft.directory/roleAssignments/standard/read
• microsoft.directory/directoryRoles/standard/read
• microsoft.directory/directoryRoles/eligibleMembers/read
• microsoft.directory/directoryRoles/members/read

Examples

Microsoft Graph REST APIAzure Portal

• GET https://graph.microsoft.com/v1.0/directoryRoles/{role ID}

Detections

N/A

Additional Resources

N/A