AZPrivilegedRoleAdmin

Documentation Index

Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt

Use this file to discover all available pages before exploring further.

​

Abuse Info

The role can grant any other admin role to another principal at the tenant level. Activate the Global Admin role for yourself or for another user using PowerZure or PowerShell.

​

Opsec Considerations

The Azure Activity Log will log who activated an admin role for what other principal, including the date and time.

​

References

• Microsoft Entra built-in roles: Privileged Role Administrator
• https://powerzure.readthedocs.io/en/latest/Functions/operational.html#add-azureadrole