Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/csandker/Azure-AccessPermissions
https://github.com/csandker/Azure-AccessPermissions
Last synced: about 2 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/csandker/Azure-AccessPermissions
- Owner: csandker
- Created: 2022-10-19T10:33:24.000Z (almost 2 years ago)
- Default Branch: master
- Last Pushed: 2023-02-21T06:46:24.000Z (over 1 year ago)
- Last Synced: 2024-07-27T09:33:16.058Z (about 2 months ago)
- Language: PowerShell
- Size: 1.24 MB
- Stars: 103
- Watchers: 3
- Forks: 18
- Open Issues: 0
-
Metadata Files:
- Readme: Readme.md
Awesome Lists containing this project
- awesome-entra - Azure-AccessPermissions - Script to enumerate access permissions in an Azure Active Directory environment [](https://badgen.net/github/stars/csandker/Azure-AccessPermissions) (Tools / CLI)
- Awesome-Azure-Pentest - Azure-AccessPermissions - PowerShell script to enumerate access permissions in an Azure AD environment (Tools / Enumeration)
README
# Azure-AccessPermissions
Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment.
Background details can be found in the accompanied blog posts:
- [Untangling Azure Active Directory Principals & Access Permissions](https://csandker.io/2022/10/19/Untangling-Azure-Permissions.html)
- [Untangling Azure Active Directory Permissions II: Privileged Access](https://csandker.io/2022/11/10/Untangling-Azure-II-Privileged-Access.html)
## Requirements
To run this script you'll need these two PowerShell modules:
- [Microsoft.Graph](https://github.com/microsoftgraph/msgraph-sdk-powershell)
- [AADInternals](https://github.com/Gerenios/AADInternals)
- [AzureADPreview](https://learn.microsoft.com/en-us/powershell/azure/active-directory/install-adv2?view=azureadps-2.0)
All of these can be installed directly within PowerShell:
```PowerShell
PS:> Install-Module Microsoft.Graph
PS:> Install-Module AADInternals
PS:> Install-Module AzureADPreview
```
## Usage
### First time use
The script uses a browser-based Login UI to connect to Azure. If you run the tool for the first time you might experience the following error
```s
[*] Connecting to Microsoft Graph...
WARNING: WebBrowser control emulation not set for PowerShell or PowerShell ISE!
Would you like set the emulation to IE 11? Otherwise the login form may not work! (Y/N): Y
Emulation set. Restart PowerShell/ISE!
```
To solve this simply allow PowerShell to emulate the browser and rerun your command.
### Example use
Import and run, no argumentes needed.
*Note: On your first run you will likely have to authenticate twice (once Microsoft Graph and once against Azure AD Graph). I might wrap this into a single login in the future...*
```PowerShell
PS:> Import-Module .\Azure-AccessPermissions.ps1
```
