MT.1028 - No user with mailbox and permanent role assignment on Control Plane.

Contributed by Thomas Naunheim with 3 co-contributorsAll contributors →

Overview

GET /beta/roleManagement/directory/roleAssignments?$expand=principal

Remediation action

Review the configuration described above.

Test Metadata

Field	Value
Test ID	MT.1028
Severity	High
Suite	Maester
Product	Entra ID
Feature	Roles and administrators
Area	Privileged access
Resource type	User
User impact	Low
Implementation cost	Medium
MITRE ATT&CK	T1078.004 Cloud Accounts, T1566 Phishing
Supports controls	nist-800-53-r5:AC-6(5), nist-800-53-r5:AC-6(2)
PowerShell test	Test-MtCheckMT1028
Services	Graph

Source

• Test: tests/maester/entra/Test.MT.1028.ps1
• Documentation: tests/maester/entra/Test.MT.1028.md