Microsoft exposes APIs in Entra ID to allow 3rd-party applications to perform actions on Microsoft services on behalf of users (called "delegated permissions"). Certain permissions can pose a serious threat to the entire Microsoft Entra tenant.

Microsoft exposes APIs through applications in Entra ID to allow 3rd-party applications to perform actions on Microsoft Entra ID itself, Microsoft 365 (O365), Azure cloud, etc. "API permissions" protect the access to these APIs, which should only be available to the service principals that require them. The permissions approval is called an "application role assignment" or a "consent grant".
Certain permissions on some Microsoft APIs (see below) can pose a serious threat to the entire Microsoft Entra tenant, because a service principal with these permissions becomes very powerful while being more discreet than a user with a powerful administrator role such as Global Administrator. Abusing this can allow an attacker to bypass the Multi-Factor Authentication (MFA) and resist user password resets.
When legitimate, the permissions increase the attack surface for the tenant. When they are not legitimate, it can be an malicious attempt to escalate privileges or persistence method.
There are two types of API permissions in Microsoft Entra ID as described in the Microsoft documentation <a href="https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview">Introduction to permissions and consent</a>:
<ul>
<li>Application permissions: see the related Indicator of Exposure "Dangerous Application Permissions Affecting the Tenant".
</li>
<li>Delegated permissions: this Indicator of Exposure examines this second type, see the related Indicator of Exposure "Dangerous Delegated Permissions Affecting Data" for threats to the environment sensitive data. The consent comes from users or administrators on behalf of the entire organization. Note that these permissions limit the application's ability to perform actions based on the signed-in user's privilege (i.e. the intersection of the permission and the user's privilege level). Therefore, the danger level of these delegated permissions depends on the actual permissions of the user of the application, as described in <a href="https://learn.microsoft.com/en-us/security/zero-trust/develop/developer-strategy-delegated-permission">Developing delegated permissions strategy</a>. Example: If a normal user delegated the "Group.ReadWrite.All" permission, it actually allows the application to modify only the groups that the user can edit and not all groups. Microsoft <a href="https://learn.microsoft.com/en-us/security/operations/incident-response-playbook-app-consent#delegated-permissions-vs-application-permissions">describes</a> them as:
<blockquote>
Delegated permissions are used by apps that have a signed-in user present and can have consents applied by the administrator or user.
</blockquote>
</li>
</ul>
This Indicator of Exposure (IoE) reports only on service principals, as API permissions apply solely to service principals, not users.
This IoE tracks the following dangerous permissions that allow access to the <a href="https://learn.microsoft.com/en-us/graph/overview">Microsoft Graph API</a> and the legacy <a href="https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview">Azure AD Graph API</a>:
<ul>
<li><code>AdministrativeUnit.ReadWrite.All</code>: Allows attackers to remove a Global Administrator from a <a href="https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/admin-units-restricted-management">Restricted Management Administrative Unit (RMAU)</a> to then reset their password if combined with other permissions.</li>
<li><code>Application.ReadWrite.All</code>: Allows attackers to inject authentication credentials into more privileged applications, enabling unauthorized access up to Global Administrator through impersonation.</li>
<li><code>Application.ReadWrite.OwnedBy</code>: Same as <code>Application.ReadWrite.All</code> but it applies only to service principals owned by the reported service principal. Note that it is not typically available as a delegated permission.</li>
<li><code>AppRoleAssignment.ReadWrite.All</code>: Allows attackers to grant themselves the <code>RoleManagement.ReadWrite.Directory</code> permission.</li>
<li><code>DeviceManagementConfiguration.ReadWrite.All</code>: Allows attackers to compromise Intune-managed devices by deploying malicious management scripts, as described by Mandiant in <a href="https://cloud.google.com/blog/topics/threat-intelligence/abusing-intune-permissions-entra-id-environments/">(In)tuned to Takeovers: Abusing Intune Permissions for Lateral Movement and Privilege Escalation in Entra ID Native Environments</a>. This can allow privilege escalation to Global Administrator if an administrator uses an Intune-managed device.</li>
<li><code>DeviceManagementRBAC.ReadWrite.All</code>: Allows attackers to assign privileged Intune roles to an account they control, enabling them to execute arbitrary commands on Intune devices, as described in <code>DeviceManagementConfiguration.ReadWrite.All</code>.</li>
<li><code>Directory.ReadWrite.All</code>: Allows attackers to add themselves as members of non-role-assignable groups, potentially gaining privileges in the Azure cloud. This can enable them to pivot through Azure resources, which may lead to privilege escalation to Global Administrator in Entra ID (e.g., via managed identities) or even Domain Admins in Active Directory (e.g., through domain controller VMs hosted in Azure).</li>
<li><code>EntitlementManagement.ReadWrite.All</code>: Allows attackers to update the assignment policy of an access package that grants the Global Administrator role, enabling them to request the role without approval.</li>
<li><code>Group.ReadWrite.All</code>: Same as <code>Directory.ReadWrite.All</code></li>
<li><code>GroupMember.ReadWrite.All</code>: Same as <code>Directory.ReadWrite.All</code></li>
<li><code>Organization.ReadWrite.All</code>: Allows attackers to add a trusted root certificate to Entra ID and authenticate as any user, including those assigned to Global Administrator. This requires either <a href="https://learn.microsoft.com/en-us/entra/identity/authentication/concept-certificate-based-authentication">Certificate-Based Authentication (CBA)</a> to be enabled, or if it's not enabled, the <code>Policy.ReadWrite.AuthenticationMethod</code> permission to enable CBA beforehand.</li>
<li><code>Policy.ReadWrite.AuthenticationMethod</code>: Allows attackers to enable the <a href="https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass">Temporary Access Pass (TAP)</a> authentication method, which is a prerequisite to exploit the <code>UserAuthenticationMethod.ReadWrite.All</code> permission when combined with this one. Alternatively, it allows attackers to enable <a href="https://learn.microsoft.com/en-us/entra/identity/authentication/concept-certificate-based-authentication">Certificate-Based Authentication (CBA)</a> to exploit the <code>Organization.ReadWrite.All</code> permission.</li>
<li><code>Policy.ReadWrite.PermissionGrant</code>: Allows attackers to create a <a href="https://learn.microsoft.com/en-us/graph/api/permissiongrantpolicy-post-includes?view=graph-rest-1.0&amp;tabs=http">permission grant policy</a> for a controlled service principal, granting the <code>RoleManagement.ReadWrite.Directory</code> permission and enabling exploitation.</li>
<li><code>PrivilegedAccess.ReadWrite.AzureADGroup</code>: Allows attackers to add a controlled user account as a member of a group assigned to the Global Administrator role.</li>
<li><code>PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup</code>: Same as <code>PrivilegedAccess.ReadWrite.AzureADGroup</code>.</li>
<li><code>PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup</code>: Allows attackers to make a controlled user account eligible for a group assigned to the Global Administrator role and then activate the membership to escalate privileges.</li>
<li><code>RoleAssignmentSchedule.ReadWrite.Directory</code>: Allows attackers to assign the Global Administrator role to a controlled user account by creating an active PIM role assignment.</li>
<li><code>RoleEligibilitySchedule.ReadWrite.Directory</code>: Allows attackers to make a controlled user account eligible for the Global Administrator role and then activate it to escalate privileges.</li>
<li><code>RoleManagement.ReadWrite.Directory</code>: Allows attackers to elevate themselves to the Global Administrator role.</li>
<li><code>RoleManagementPolicy.ReadWrite.AzureADGroup</code>: Allows attackers to remove group role assignments and activation constraints, such as MFA requirements or admin approval, to leverage <code>PrivilegedAccess.ReadWrite.AzureADGroup</code>, <code>PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup</code>, or <code>PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup</code>, and follow the same path as those permissions in a tenant with strict PIM settings.</li>
<li><code>RoleManagementPolicy.ReadWrite.Directory</code>: Allows attackers to remove Entra role assignment and activation constraints such as MFA requirements or administrator approval to leverage <code>RoleAssignmentSchedule.ReadWrite.Directory</code> or <code>RoleEligibilitySchedule.ReadWrite.Directory</code>, and follow the same path as those permissions in a tenant with strict PIM settings.</li>
<li><code>User.DeleteRestore.All</code>: Allows attackers to delete all user accounts in the tenant, rendering it unavailable, and then demand a ransom to restore one of the break-glass accounts. While it does not allow escalation to Global Administrator, it disrupts access.</li>
<li><code>User.EnableDisableAccount.All</code>: Allows attackers to disable all user accounts in the tenant, rendering it unavailable, and then demand a ransom to restore one of the break-glass accounts. While it does not allow escalation to Global Administrator, it disrupts access.</li>
<li><code>User.ReadWrite.All</code>: Allows attackers to edit sensitive properties of a controlled user account, such as "Employee ID" and "Department", to make it a member of a dynamic group (see corresponding IoE) with assigned privileged Azure permissions. They can then leverage Azure resources to eventually escalate to Global Administrator.</li>
<li><code>User-PasswordProfile.ReadWrite.All</code>: Same as <code>Directory.ReadWrite.All</code></li>
<li><code>UserAuthenticationMethod.ReadWrite.All</code>: Allows attackers to generate a <a href="https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass">Temporary Access Pass (TAP)</a> and take over any user account in the tenant. If TAP is not already enabled, they must combine this with <code>Policy.ReadWrite.AuthenticationMethod</code> to enable TAP as an authentication method in the tenant (see corresponding IoE).</li>
</ul>
This IoE also tracks <a href="https://www.tenable.com/blog/despite-recent-security-hardening-entra-id-synchronization-feature-remains-open-for-abuse">this dangerous permission</a> of the "Microsoft Entra AD Synchronization Service" API:
<ul>
<li><code>ADSynchronization.ReadWrite.All</code>: Enables attackers to call the undocumented Synchronization API, allowing them to modify hybrid user accounts and reset their passwords.</li>
</ul>
Legitimate applications with these dangerous permissions request access that may be overly broad. This can also indicate a phishing attack known as an "illicit consent grant," where an attacker successfully obtains consent from an administrator.
By default, this IoE ignores disabled service principals because attackers cannot immediately use them.
External references:
<ul>
<li><a href="https://posts.specterops.io/azure-privilege-escalation-via-azure-api-permissions-abuse-74aee1006f48">Andy Robbins - Azure Privilege Escalation via Azure API Permissions Abuse</a></li>
<li><a href="https://posts.specterops.io/directory-readwrite-all-is-not-as-powerful-as-you-might-think-c5b09a8f78a8">Andy Robbins - Directory.ReadWrite.All Is Not As Powerful As You Might Think</a></li>
<li><a href="https://csandker.io/2022/11/10/Untangling-Azure-II-Privileged-Access.html">Carsten Sandker - Untangling Azure Active Directory Permissions II: Privileged Access</a></li>
<li><a href="https://dirkjanm.io/azure-ad-privilege-escalation-application-admin/">Dirk-jan Mollema - Azure AD privilege escalation - Taking over default application permissions as Application Admin</a></li>
<li><a href="https://github.com/emiliensocchi/azure-tiering/tree/main/Microsoft%20Graph%20application%20permissions#-tier-0-family-of-global-admins">Emilien Socchi - Tier 0 permissions</a> (refer to it for further details including exploitability justifications)</li>
<li><a href="https://m365internals.com/2021/07/24/everything-about-service-principals-applications-and-api-permissions/">Huy Kha - Everything about Service Principals, Applications, and API Permissions</a></li>
<li><a href="https://www.inversecos.com/2021/10/how-to-backdoor-azure-applications-and.html">Lina Lau - How to Backdoor Azure Applications and Abuse Service Principals</a></li>
<li><a href="https://cloud.google.com/blog/topics/threat-intelligence/abusing-intune-permissions-entra-id-environments/">Mandiant Red Team - (In)tuned to Takeovers: Abusing Intune Permissions for Lateral Movement and Privilege Escalation in Entra ID Native Environments</a></li>
<li><a href="https://youtu.be/jMOFWVOm-Y4?t=2229">Marius Solbakken Mellum - Surprising ways to escalate privileges in Entra ID</a></li>
<li><a href="https://winsmarts.com/how-to-grant-admin-consent-to-an-api-programmatically-e32f4a100e9d">Sahil Malik - How to grant admin consent to an API programmatically</a></li>
<li><a href="https://learningbydoing.cloud/blog/audit-ms-graph-app-role-assignments/">Stian A. Strysse - What's lurking in your Microsoft Graph app role assignments?</a></li>
</ul>

Initial Access

Phishing

Persistence

Cloud Application Integration

Detections

Analytics

Dangerous Delegated Permissions Affecting the Tenant

HIGH

Version 202507070935

Version 202411251447

Version 202507070935 Jul 7, 2025, 9:35 AM Metadata (link to blogpost) Release: 202507070935
Version 202411251447 Nov 25, 2024, 2:47 PM New Release: 202411251447