Test-MtEntraAgentBlueprintAllAllowedInheritance
SYNOPSIS
Finds Agent Identity Blueprints with inheritable permissions set to allow all scopes or roles.
SYNTAX
Test-MtEntraAgentBlueprintAllAllowedInheritance [-ProgressAction <ActionPreference>] [<CommonParameters>]
DESCRIPTION
Checks whether any Agent Identity Blueprint's inheritable permissions configuration uses the allAllowed pattern for delegated scopes or application roles on a resource. allAllowed inherits every current AND future permission granted to the blueprint on that resource to every child Agent Identity, without additional consent. A single future grant on the blueprint becomes effective on every agent immediately, so this is the highest-impact escalation path in the Agent ID permission model.
EXAMPLES
EXAMPLE 1
Test-MtEntraAgentBlueprintAllAllowedInheritance
PARAMETERS
-ProgressAction
Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.
Type: ActionPreference
Parameter Sets: (All)
Aliases: proga
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
INPUTS
OUTPUTS
System.Boolean
NOTES
RELATED LINKS
https://maester.dev/docs/commands/Test-MtEntraAgentBlueprintAllAllowedInheritance