How do you handle Azure Enterprise Application and API permission?
If "I let my users consent to whatever the appliations ask for" is your strategy - please read on
Vasil Michev wrote a good article back in 2021 about “Inventorying Permissions to Azure AD Apps”.
The link and procedure on how to check access: https://practical365.com/inventorying-azure-ad-apps-and-their-permissions/
The Powershell script that is beeing used can be found here: https://github.com/michevnew/PowerShell/blob/master/app_Permissions_inventory_GraphAPI.ps1
[Read More]