MT.1025 - No external user with permanent role assignment on Control Plane.
Overview
GET /beta/roleManagement/directory/roleAssignments?$expand=principal
Remediation action
Review the configuration described above.
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1025 |
| Severity | High |
| Suite | Maester |
| Product | Entra ID |
| Feature | Roles and administrators |
| Area | Privileged access |
| Resource type | User |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | T1078.004 Cloud Accounts, T1199 Trusted Relationship |
| Supports controls | nist-800-53-r5:AC-6(5), nist-800-53-r5:AC-2(7) |
| PowerShell test | Test-MtCheckMT1025 |
| Services | Graph |
Source
- Test:
tests/maester/entra/Test.MT.1025.ps1 - Documentation:
tests/maester/entra/Test.MT.1025.md