Azure Subscription-Scope Owner or Contributor Role Assignment
Detects when a user or service principal is assigned the 'Owner' or 'Contributor' role at the Subscription scope in Azure. This activity is often associated with privilege escalation and persistent access techniques.
Microsoft Sentinel (KQL)

