Application Owner Added

Last updated on:

About the rule

Rule Type

Standard

Rule Description

Identifies when a new owner is assigned to an Entra ID application, indicating a privilege change.

Severity

Attention

Rule Requirement

Criteria

Action1: actionname = "Owner Added to Application" select Action1.CALLER,Action1.TARGET,Action1.RESULT,Action1.RESOURCE,Action1.OPERATION

Detection

Execution Mode

realtime

Log Sources

Microsoft 365