EIDSCA.CR02 - Consent Framework - Admin Consent Request - Reviewers will receive email notifications for requests.

Contributed by Thomas NaunheimAll contributors →

Overview

Specifies whether reviewers will receive notifications

Test script

https://graph.microsoft.com/beta/policies/adminConsentRequestPolicy
.notifyReviewers -eq 'true'

Related links

• Open in Graph Explorer
• adminConsentRequestPolicy resource type - Microsoft Graph v1.0 | Microsoft Learn
• View in Microsoft Entra admin center

MITRE ATT&CK

Tactic	Technique	Mitigation
TA0001 - Initial Access - Initial Access TA0005 - Defense Evasion - Stealth TA0006 - Credential Access - Credential Access TA0008 - Lateral Movement - Lateral Movement	T1078 - Valid Accounts T1528 - Steal Application Access Token T1550 - Use Alternate Authentication Material T1550.001 - Use Alternate Authentication Material: Application Access Token T1566.002 - Phishing: Spearphishing Link	M1018 - User Account Management M1017 - User Training

Test Metadata

Field	Value
Test ID	EIDSCA.CR02
Severity	Low
Suite	Entra ID SCA
Product	Entra ID
Feature	App consent and permissions
Area	Applications and workload identities
Resource type	Tenant
User impact	Low
Implementation cost	Low
MITRE ATT&CK	None
PowerShell test	Test-MtCheckEidscaCR02
Services	Graph

Source

• Test: tests/eidsca/Test.EIDSCA.CR02.ps1
• Documentation: tests/eidsca/Test.EIDSCA.CR02.md