Listen to this Post
You Should Know:
The Entra Applications Permissions report provides rich visibility into the activity, usage, sign-in types, permissions, and risks of applications within your tenant. Below are some key features and steps to utilize this report effectively:
Key Features:
- Summary View: Breaks down all apps by type and permissions.
- Table View: Displays detailed information about each application.
- Granular Filters: Allows filtering applications based on specific criteria.
- Search Functionality: Search by application name or specific permission.
- Security Risk Indicators: Highlights risky apps with quick filter options.
- Export Options: Export the current table view to CSV or print it.
Steps to Use the Report:
1. Download the Report Script:
- Ensure you have the necessary permissions to run scripts in your tenant.
- Download the script from the provided link: Entra Applications Permissions Report.
2. Run the Script:
- Open PowerShell with administrative privileges.
- Navigate to the directory where the script is saved.
- Run the script using the following command:
.\Invoke-EntraAppReport.ps1 -OutPath C:\temp
- This will generate the report and save it to the specified directory.
3. Analyze the Report:
- Open the generated CSV file to review the applications.
- Use the filters to identify risky applications, stale applications, or those with excessive permissions.
4. Take Action:
- Revoke unnecessary permissions.
- Update or remove stale applications.
- Ensure all applications adhere to the principle of least privilege.
Useful Commands:
- Check Application Permissions:
Get-AzureADServicePrincipal -All $true | Select-Object DisplayName, AppId, AppRoles
Revoke Application Permissions:
Remove-AzureADServiceAppRoleAssignment -ObjectId <ObjectId> -AppRoleAssignmentId <AppRoleAssignmentId>
Export Application List:
Get-AzureADApplication -All $true | Export-Csv -Path C:\ApplicationsList.csv
What Undercode Say:
The Entra Applications Permissions report is an essential tool for maintaining a secure and well-managed tenant. By regularly reviewing and acting on the insights provided, you can significantly reduce the risk of security breaches and ensure compliance with best practices. Always remember to follow the principle of least privilege and keep your applications up-to-date. For more detailed information, refer to the official documentation: Microsoft Entra Documentation.
This guide provides a comprehensive overview of how to use the Entra Applications Permissions report, along with practical commands and steps to ensure your tenant remains secure and efficient.
References:
Reported By: Danielbradley2 Microsoft – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
