Application Permission Grant or Role Assignment

Daniel Koifman@Koifsec

•updated Mar 1, 2026•13•0•83

High-privilege permission grants (Mail, Files, Directory, Role Management) and sensitive role assignments. The full_access_as_app and Exchange.ManageAsApp permissions are especially critical — these grant tenant-wide mailbox access without user delegation, exactly the capability Midnight Blizzard exploited.