Azure Add App Role Assignment To Service Principal
Grants a resource application role to a client service principal.
T1098.003: Additional Cloud Roles
T1098.003: Additional Cloud Roles
An adversary may add additional roles or permissions to an adversary-controlled cloud account to maintain persistent access to a tenant. For example, adversaries may update IAM policies in cloud-based environments or add a new global administrator in Office 365 environments. With sufficient permi...
View on MITRE ATT&CK →Azure Add Eligible Member To Role In Pim Completed
Records completed creation of PIM role eligibility.
Azure Add Member To Role
Adds a principal to a Microsoft Entra directory role.
Azure Add Role Definition (Azure RBAC)
Creates a custom Azure resource RBAC role definition.
GCP add-iam-policy-binding
Adds a role binding through a resource-specific IAM policy update.
GCP compute.disks.setIamPolicy
Replaces the IAM allow policy on a Compute Engine persistent disk.
AWS CreateRole
Creates an IAM role with a trust policy and optional role settings.
AWS CreateServiceLinkedRole
Creates an IAM role linked to a specific AWS service.
GCP google.iam.admin.v1.SetIAMPolicy
Sets the IAM allow policy on a service account.
Azure Microsoft.Authorization/elevateAccess/action
Grants an Entra Global Administrator Azure User Access Administrator at root scope.
Azure Microsoft.Authorization/roleAssignments/write
Creates or updates an Azure RBAC role assignment, granting a principal specific permissions on a resource or scope.
Azure Microsoft.Directory/groups/members/update
Updates membership of an Entra group that is not role-assignable.
GCP storage.setIamPermissions
Records a Cloud Storage access-policy change; this example changes bucket IAM.
Azure Update Role Definition (Azure RBAC)
Updates a custom Azure resource RBAC role definition.