search

BloodHoundAD / AzureHound

Azure Data Exporter for BloodHound
GNU General Public License v3.0
532 stars 71 forks source link

AdministrativeUnits Not showing within Azure Role for Role #80

Open felixguerrero12 opened 1 month ago

felixguerrero12 commented 1 month ago

Bloodhound entry related to the Azure Role: {"kind":"AZRole","data":{"id":"729827e3-9c14-49f7-bb1b-9608f156bbb8","description":"Can reset passwords for non-administrators and Helpdesk Administrators.","displayName":"Helpdesk Administrator","isBuiltIn":true,"isEnabled":true,"resourceScopes":["/"],"rolePermissions":[{"allowedResourceActions":["microsoft.azure.serviceHealth/allEntities/allTasks","microsoft.azure.supportTickets/allEntities/allTasks","microsoft.directory/bitlockerKeys/key/read","microsoft.directory/deviceLocalCredentials/standard/read","microsoft.directory/users/invalidateAllRefreshTokens","microsoft.directory/users/password/update","microsoft.office365.serviceHealth/allEntities/allTasks","microsoft.office365.supportTickets/allEntities/allTasks","microsoft.office365.webPortal/allEntities/standard/read"]}],"templateId":"729827e3-9c14-49f7-bb1b-9608f156bbb8","version":"1","tenantId":"2e0d024c-5e44-47f7-b4b8-....","tenantName":"tenant name"}}

The AdministrativeUnit entry is not showing within Bloodhound, and wanted to see if there's a way to actually have this enumerated.

image image

felixguerrero12 commented 1 month ago

https://github.com/BloodHoundAD/AzureHound/blob/9f36bca4a6513bdb0c3d3e9fb9f4c420397218cc/cmd/list-role-assignments.go#L102-L114

I was looking at the source code and not sure if its collected.