build1 publisher
An external app with user consent reads mail without holding an account in the tenant
Microsoft's guidance on illicit consent grants says password resets and MFA do not touch the access, and it sends admins to the Purview audit log, where the entry can take up to 24 hours to appear.
Publishers:learn.microsoft.com
Reality
- Evidence64
- Adoption
- Insufficient
- Hype gap−12
- Incentives58
- Confidence66