AZPrivilegedRoleAdmin

The principal has the Privileged Role Administrator Entra ID role active against the target tenant.

Abuse Info

The role can grant any other admin role to another principal at the tenant level. Activate the Global Admin role for yourself or for another user using PowerZure or PowerShell.

Opsec Considerations

The Azure Activity Log will log who activated an admin role for what other principal, including the date and time.

References

• Microsoft Entra built-in roles: Privileged Role Administrator
• https://powerzure.readthedocs.io/en/latest/Functions/operational.html#add-azureadrole