AZResetPassword

The ability to change another user’s password without knowing their current password.

Abuse Info

Find the user in the Azure portal, then click “Reset Password”, or use PowerZure’s Set-AzureUserPassword cmdlet. If password write-back is enabled, this password will also be set for a synced on-prem user.

Opsec Considerations

Azure will log each password reset event, including who performed the reset, against which account, and at what date and time.

References

• https://powerzure.readthedocs.io/en/latest/Functions/operational.html#set-azureuserpassword