// Internal · Cloud

Azure - Requirements

Azure - Requirements

Pentest Requirements

Users and roles:

Global Reader and Security Reader roles in Azure AD
Reader permission over the subscription

Subscriptions:

Azure Dev/Test subscription.
Visual Studio subscription determines the monthly Azure credits you receive
- Visual Studio Enterprise: $150/month
- MSDN Platforms: $100
- Visual Studio Professional: $50
- Visual Studio Test Professional: $50

Powershell and Native Modules

Microsoft Graph: Install-Module Microsoft.Graph -Scope CurrentUser
Azure AD: Install-Module AzureAD
Azure AD Preview: Install-Module AzureADPreview
Azure CLI: winget install -e --id Microsoft.AzureCLI

Terminology

Tenant: An instance of Azure AD and represents a single organization.
Azure AD Directory: Each tenant has a dedicated Directory. This is used to perform identity and access management functions for resources.
Subscriptions: It is used to pay for services. There can be multiple subscriptions in a Directory.
Core Domain: The initial domain name <tenant>.onmicrosoft.com is the core domain. It is possible to define custom domain names too.

References

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Choose your decrypted JSON once to save access:

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.