This is an interactive task for auditing the group memberships of Azure AD user accounts.
It is a read-only task that doesn't require a privileged account on Azure AD.
Required Vault Details
- Tenant ID
- Client ID
- Client Secret
The service principal must have permissions to read Azure AD.
As this is a read-only task, the Azure AD credentials do not require write permissions.
PPA will add these to Vault for you when you first run the task (see Vault Config Wizard for more).
What the Task Does
Once started, this task allows the operator to:
- Search for and select an Azure AD user account
- View & download the resultant group membership table
Get PPA for free!
Start automating your estate with a free 30 day trial today. No signup required!Get PPA Express