BAA 06 – Lab

Objective: Bypass admin consent restrictions by using a pre-consented public client ID to authenticate against Microsoft Graph. Enumerate users, groups, roles, and applications in the Entra ID tenant using MSGraph API, AzureAD module, and RoadRecon.