MT.1027 - No Service Principal with Client Secret and permanent role assignment on Control Plane.
Overview
GET /beta/roleManagement/directory/roleAssignments?$expand=principal
Remediation action
Review the configuration described above.
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1027 |
| Severity | High |
| Suite | Maester |
| Product | Entra ID |
| Feature | Roles and administrators |
| Area | Privileged access |
| Resource type | ServicePrincipal |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | T1078.004 Cloud Accounts, T1552 Unsecured Credentials |
| Supports controls | nist-800-53-r5:AC-6(5), nist-800-53-r5:IA-5 |
| PowerShell test | Test-MtCheckMT1027 |
| Services | Graph |
Source
- Test:
tests/maester/entra/Test.MT.1027.ps1 - Documentation:
tests/maester/entra/Test.MT.1027.md