Skip to content

Commit

Permalink
doc(azure): Add new Entra permissions
Browse files Browse the repository at this point in the history
  • Loading branch information
puchy22 committed Apr 3, 2024
1 parent adf3d14 commit 8fb367d
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions docs/getting-started/requirements.md
Original file line number Diff line number Diff line change
Expand Up @@ -64,16 +64,17 @@ The other three cases does not need additional configuration, `--az-cli-auth` an

To use each one you need to pass the proper flag to the execution. Prowler for Azure handles two types of permission scopes, which are:

- **Azure Active Directory permissions**: Used to retrieve metadata from the identity assumed by Prowler and future AAD checks (not mandatory to have access to execute the tool)
- **Microsoft Entra ID permissions**: Used to retrieve metadata from the identity assumed by Prowler (not mandatory to have access to execute the tool).
- **Subscription scope permissions**: Required to launch the checks against your resources, mandatory to launch the tool.


#### Azure Active Directory scope
#### Microsoft Entra ID scope

Microsoft Entra ID (AAD earlier) permissions required by the tool are the following:

- `Directory.Read.All`
- `Policy.Read.All`
- `UserAuthenticationMethod.Read.All`

The best way to assign it is through the Azure web console:

Expand All @@ -86,9 +87,10 @@ The best way to assign it is through the Azure web console:
5. In the left menu bar, select "API permissions"
6. Then click on "+ Add a permission" and select "Microsoft Graph"
7. Once in the "Microsoft Graph" view, select "Application permissions"
8. Finally, search for "Directory" and "Policy" and select the following permissions:
8. Finally, search for "Directory", "Policy" and "UserAuthenticationMethod" select the following permissions:
- `Directory.Read.All`
- `Policy.Read.All`
- `UserAuthenticationMethod.Read.All`
![EntraID Permissions](../img/AAD-permissions.png)


Expand Down
Binary file modified docs/img/AAD-permissions.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit 8fb367d

Please sign in to comment.