| Privilege Abuse | app-activity
↳microsoft-azure-sk4-app-activity-adduser
↳microsoft-azure-sk4-app-activity-addmembertorole
↳microsoft-azuremon-sk4-app-activity-success-updategroup
↳microsoft-azure-sk4-app-activity-addmembertorole
app-activity-failed
↳microsoft-azure-sk4-app-activity-adduser
↳microsoft-azure-sk4-app-activity-addmembertorole
↳microsoft-azuremon-sk4-app-activity-success-updategroup
↳microsoft-azure-sk4-app-activity-addmembertorole
| T1078 - Valid Accounts
T1098 - Account Manipulation
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
| |