Skip to content

Commit d63496d

Browse files
authored
Enhance README for Profile-App.ps1 details
Updated the Profile-App.ps1 section with detailed output and use case information.
1 parent 20ff7bc commit d63496d

1 file changed

Lines changed: 7 additions & 3 deletions

File tree

README.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -309,9 +309,13 @@ The recommended input for this permission review is: entra-application-registrat
309309

310310
### `Profile-App.ps1`
311311
- **Purpose:** Profiles a single AppId in detail.
312-
- **Output Includes:** Owners, credentials, delegated/app‑only permissions, assignments, and recent sign‑ins.
313-
- **Use Case:** Produces a **governance‑ready profile** for documentation, incident response, or app reviews.
314-
- **Frequency:** Run **ad‑hoc** during investigations, risk reviews, or onboarding/offboarding of third‑party apps.
312+
Creates a governance-ready profile for a single Microsoft Entra application using its application client ID.
313+
Output includes:
314+
Application registration and service principal metadata, owners, password and certificate credential metadata, application permissions, delegated OAuth consent grants, enterprise application assignments, interactive sign-ins, service principal sign-ins, and data-availability warnings.
315+
Run ad hoc when investigating findings from BulkMultiPermExploitability.ps1, reviewing a privileged integration, validating an application owner, or assessing an application before remediation.
316+
```powershell
317+
.\Profile-App.ps1 -TargetAppId "xxx"
318+
```
315319

316320
### `Audit-AppDelegationRisks.ps1`
317321
- **Purpose:** Focuses on delegated OAuth2 grants. Profiles a single service principal to audit delegated permission grants and identify high‑risk delegated scopes (e.g., mail, calendars, device management).

0 commit comments

Comments
 (0)