Microsoft Entra’s Billing Roles Pose Privilege Escalation Risks in Azure

Microsoft Entra’s billing roles pose privilege escalation risks in Azure

Threat actors can abuse one of Microsoft Entra’s by-design features, the software giant’s cloud-based identity and access management service, to gain persistence and escalate privilege inside a target Azure account. According to a BeyondTrust discovery, Entra (formerly Azure Active Directory) grants intended yet risky capabilities to B2B guest users through Microsoft’s billing permissions. “BeyondTrust researchers discovered that Entra guest use…

Microsoft Entra Design Lets Guest Users Gain Azure Control, Researchers Say

Researchers reveal how guest accounts with billing roles can create Azure subscriptions inside external tenants, gaining unexpected Owner access and opening hidden privilege risks.