Oauth Audit bypass to graph

gistfile1.txt

Install AZ CLI:

az login --allow-no-subscription


Install MS Graph:

Install-Module Microsoft.Graph -Scope AllUsers


Install MSIdentityTools:

Install-Module MSIdentityTools


Install Import Excel Module:

Install-Module ImportExcel


Login to AZ CLI:

az login --allow-no-subscription


Convert Access token to json:

$graphAccessUserAsAll = az account get-access-token --scope="https://graph.microsoft.com/Directory.AccessAsUser.All" | ConvertFrom-Json


Convert json access token to secure string:

$securePassword = ConvertTo-SecureString -String $graphAccessUserAsAll.accessToken -AsPlainText -Force


Connect to Graph:

Connect-MgGraph -AccessToken $securePassword


Run Report:

Export-MsIdAppConsentGrantReport -ReportOutputType ExcelWorkbook -ExcelWorkbookPath .\AppConsent.xlsx