Forum Discussion
Dean_Gross
Jun 26, 2021Silver Contributor
OAuth App confusion
My colleague added an app, and we got the following alert, The user xxx (xxx@ourtenant.com) performed an unusual addition of credentials to Prisma Cloud App gctvc. This usage pattern may indicate t...
VasilMichev
Jun 26, 2021MVP
MCAS only lists apps that use Delegate permissions, that might explain it.
Dean_Gross
Jun 26, 2021Silver Contributor
Thanks, that is an interesting idea, but when I look at the permissions page for the app in AAD, nothing is listed for Admin or User consent. where else should I be looking?
- VasilMichevJun 27, 2021MVPNo permissions at all? That's very strange...