Background#

Multiple services can be accessible to an authenticated Azure AD account. Some of these services might no be relevant to all users. If they are not relevant yet available to all users this introduce unnecessary access to data/applications.

Pre-requisites#

Access to an Azure AD account.

Risks#

No risks.

How to check for#

Get-AzADApplication

How to exploit#

Recommendation#

References#