Skip to main content
Version: 2.2.0

Test-MtEntraAgentForeignPrivileged

SYNOPSIS​

Finds foreign or multi-tenant Agent Blueprint Principals and Agent Identities with privileged access.

SYNTAX​

Test-MtEntraAgentForeignPrivileged [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

Checks whether Blueprint Principals owned by an external tenant (multi-tenant applications) or their child Agent Identities have been granted an Entra directory role that Maester's built-in role catalogue classifies as privileged through Get-MtRoleInfo. Application permissions held by a foreign Blueprint Principal are reported as an observation for review, not as a failure.

EXAMPLES​

EXAMPLE 1​

Test-MtEntraAgentForeignPrivileged

PARAMETERS​

-ProgressAction​

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtEntraAgentForeignPrivileged

https://learn.microsoft.com/graph/api/serviceprincipal-list-approleassignments?view=graph-rest-1.0