ROADtools
ROADtools are "A collection of Azure AD/Entra tools for offensive and defensive security purposes."
Install
Check the wiki but I just use the ROADtools baked into exegol.
Authenticate
I learned in this issue that it helps to specify the client ID of Azure CLI:
roadrecon auth --device-code -c 04b07795-8ddb-461a-bbee-02f9e1bf7b46
Gather the goods
roadrecon gather
Review gathered info
I find it quickest and easiest (especially on a headless Linux box) to spin up a GUI I can hit from another VM with a browser:
roadrecon gui --host 0.0.0.0 --port 7777