AZHasRole

This edge indicates that a principal has been granted a particular AzureAD admin role.

Abuse Info

No abuse is necessary. This edge only indicates that the principal has been granted a particular AzureAD admin role.

Opsec Considerations

The opsec considerations for a particular action authorized by a principal“s active AzureAD role assignment will wholly depend on what the action taken is. This edge does not capture all abusable possibilities.

References

• https://docs.microsoft.com/en-us/graph/permissions-reference
• https://docs.microsoft.com/en-us/azure/role-based-access-control/overview