Azure Service Principal Self-Assigned App Role Privilege Escalation

This detection identifies when an Azure Service Principal elevates privileges by adding itself to a new app role assignment. This activity indicates a potential privilege escalation attempt where a service principal grants itself additional permissions, which could lead to unauthorized access or control within the Azure environment.