Skip to content

Commit a08498c

Browse files
authored
Revise README for Audit-AllUsersRolePerms.ps1 script
Updated description of the Audit-AllUsersRolePerms.ps1 script to clarify its functionality and requirements.
1 parent e97de71 commit a08498c

1 file changed

Lines changed: 1 addition & 2 deletions

File tree

README.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -350,8 +350,7 @@ Run ad hoc when investigating suspicious applications, validating findings from
350350

351351
### `Audit-AllUsersRolePerms.ps1`
352352

353-
Tenant-wide audit of default user role permissions, privileged directory roles, and high-privilege Azure RBAC assignments—highlighting only users who exceed the locked-down defaults.
354-
Must have Graph API permissions Policy.Read.All to use this script
353+
Performs a tenant-wide, read-only audit of Microsoft Entra default user permissions, active directory-role assignments, and high-privilege Azure RBAC access. Expands role-assignable and Azure RBAC groups into effective user privilege paths, distinguishes direct from group-derived assignments, and generates timestamped findings, evidence, coverage, warning, and governance reports.
355354

356355
```powershell
357356
.\Audit-AllUsersRolePerms.ps1

0 commit comments

Comments
 (0)