ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-03-22 03:08:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(m365): add entra_app_registration_no_unused_privileged_permissions security check (#10080)

Browse Source 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
This commit is contained in:
Hugo Pereira Brito
2026-02-19 17:12:50 +01:00
committed by GitHub
parent 23e51158e0
commit 20b26bc7d0
11 changed files with 1292 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docs/user-guide/providers/microsoft365/authentication.mdx
View File

@@ -45,6 +45,7 @@ When using service principal authentication, add these **Application Permissions
- `SecurityIdentitiesHealth.Read.All`: Required for `defenderidentity_health_issues_no_open` check.
- `SecurityIdentitiesSensors.Read.All`: Required for `defenderidentity_health_issues_no_open` check.
- `SharePointTenantSettings.Read.All`: Required for SharePoint service.
- `ThreatHunting.Read.All`: Required for Entra checks that use Defender XDR Advanced Hunting (e.g., unused privileged permissions detection). Also requires App Governance to be enabled in Microsoft Defender for Cloud Apps.
**External API Permissions:**