V20260104

Changelog

General

• Added: Introduced BroCi Authentication (beta) via the -Broci switch. Benefits:
  • Only one interactive authentication is required (instead of two).
  • Does not rely on applications like Azure Active Directory PowerShell, which may require assignment.
  • Allows you to bring your own token for authentication via the -BroCiToken parameter.
    The token must be a refresh token for the client c44b4083-3bb0-49c1-b47d-974e53cbdf3c (Azure Portal).

Enterprise Applications

• Added: Classified Directory.AccessAsUser.All as a high-privilege Microsoft Graph permission.
• Added: Creation timestamp in the detail view and a days since creation column in the table.
• Improved: API permissions in the appendix are now sorted by API and then by severity.

App Registrations

• Added: Creation timestamp in the detail view and a days since creation column in the table.

Managed Identities

• Added: Creation timestamp in the detail view and a days since creation column in the table.
• Improved: API permissions in the appendix are now sorted by API and then by severity.

Users

• Added: User details now indicate whether the account is enabled.

Role Assignments Azure / Entra

• Fixed: The CSV export no longer contains HTML links in values or references to non-existent columns.

Internal

• Updated: Updated the EntraTokenAid version.
• Fixed: The JSON object was parsed twice in the HTML report.
• Improved: Authentication function that manages the different authentication flows with EntraTokenAid.

Full Changelog: V20251208...V20260104