AzTier logo: Azure Administrative Tiering
AZTIER // azure administrative tiering
loading… GitHub ↗

Azure Administrative Tiering · known attack paths

See the risks behind the roles.

Azure roles, Entra roles and Microsoft Graph application permissions, tiered based on known attack paths.

Tier Asset Path Id

About AzTier

This is a simple frontend for the Azure Administrative Tiering (AzTier) project.

Each asset is assigned to a tier based on known attack paths towards full tenant takeover. Lower tier = closer to Global Admin. Direct paths reach Global Admin with the asset alone; indirect paths require pivoting through another identity or resource.

Disclaimer

AzTier is not a Microsoft service or product, but a personal project with no implicit or explicit obligations. For more information, see the project's original disclaimer.