BloodHound icon indicating copy to clipboard operation
BloodHound copied to clipboard

Feature: Map AZUser and AZGroup to AZApp using AZMemberOf relationship

Open hrcastro opened this issue 1 month ago • 0 comments

Feature Description

Being able to see which users, either via group assignment or direct user assignment, can access an azure application

Are you intending to implement this feature?

yes, i did already in my fork

Current Behavior

this can't be done because there exist no relationships between groups and users assigned to an azure application

Desired Behavior

i can see the relationships between users&groups and an azure application

Use Case

I can tag a Critical applications as Tier_Zero, and then can run a query like below to see what users are granted access to a Critical application MATCH p=shortestPath((s:AZBase)-[:AZMemberOf*1..]->(t:AZBase)) WHERE (t:Tag_Tier_Zero) AND s<>t AND t:AZApp RETURN p

Implementation Suggestions

Optional: If you have any suggestions on how this feature could be implemented, you can provide them here.

Additional Information

Include any other relevant information that could help in understanding or implementing the feature.

hrcastro avatar Nov 23 '25 18:11 hrcastro