#37982 [Blackpoint][Artichoke Consulting][[email protected]][Cloud Response (M365)][Admin Consented to Unverified Enterprise App]

New-BlackpointCyber Created Apr 21, 2026, 11:08 PM

Check-in (internal) Apr 21, 2026, 11:08 PM

Blackpoint Cloud Response for Microsoft 365 has detected that an Administrator with the username, [email protected], has granted the Unverified Application, CIPP-SAM access to the following information in Microsoft 365:

DelegatedPermissionGrant.ReadWrite.All

Directory.ReadWrite.All

AppRoleAssignment.ReadWrite.All

offline_access