martijndevrieze/AzureAudit
1
0
Fork 0
Code Issues Pull requests Projects Packages Wiki Activity
Scripts executing a full Azure tenant audit, this is all 100% READ ONLY, no data exfiltration or anything.
8 commits 2 branches 0 tags 291 KiB
  • PowerShell 100%
Find a file
Exact
Martijn de Vrieze 8aa1632705 Add UserAuthenticationMethod.Read.All for per-user MFA collection 
01-Identity uses Get-MgUserAuthenticationMethod, which needs
UserAuthenticationMethod.Read.All. It was missing from the requested
scopes and the README permission list, so per-user MFA enumeration
failed with "Request Authorization failed" (403) in app-only runs.
Add it to the connect scopes and the README so the App Registration
gets it granted with admin consent.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-25 13:17:37 +02:00
E5-CloudShell Fix parse error and make collectors work in app-only mode 2026-06-25 13:09:05 +02:00
E5-PS1 Add UserAuthenticationMethod.Read.All for per-user MFA collection 2026-06-25 13:17:37 +02:00
.gitignore Add .gitignore to keep assessment data out of the repo 2026-06-25 13:01:17 +02:00