AppGov Preventive Maintenance Webinar Series - Season 5 Episode 2 

The Hidden Risk of App Permissions: How to Take Control of App Governance in Microsoft Entra ID 

📅 Recorded July 22, 2026  |   On-Demand   |   Speakers: Nicolas Blank & Alistair Pugin

Can you answer these about your own tenant right now?

  • 1. Do you know how many app registrations and enterprise apps exist in your tenant?
  • 2. How many new apps showed up in your tenant in the last 30 days?
  • 3. How many apps hold API permissions that carry privilege-escalation capabilities?
  • 4. How many of your apps have no owner?
  • 5. Can your employees give apps access to company data without involving an admin?
If you paused on any of these, run your free AppGov Score

Watch the key clips

Delegated vs Application Permissions in Entra ID
Does Resetting Passwords Stop a Breach?
5 App Governance Questions About Your Entra Applications

Ready to go deeper than the Score?

Book 15 minutes to unlock the AppGov Standard trial

What you'll learn

  • The real risks of unused or excessive app permissions (e.g., the dangers of  Mail.ReadWrite and Directory.ReadWrite.All).
  • The critical differences between Delegated Permissions and Application Permissions.
  • What “good” app governance looks like (least privilege, owner attestation, access reviews, and lifecycle management).
  • How to proactively manage and monitor apps at scale to prevent OAuth abuse.
  • Practical steps to improve visibility, fix misconfigurations, and regain control today.

Meet the Speakers:

Alistair Pugin

Alistair Pugin

M365 + Security MVP | Blogger | Podcaster | Speaker | Founder, CEO - YModernize

Alistair has worked in various capacities in multiple verticals from retail-manufacturing to government, spanning 50 to 50000 users utilizing all aspects of pure Enterprise Information Management.

Specialties: 20+ years pure IT, 16 years ECM, Livelink, Zylab, SharePoint, FileNet, etc. IT Pro dabbling in Dev, ECM Consultant, Suffering from Technophilia. Technology Architect specializing in Business Productivity Enrichment.

Connect on LinkedIn

Nicolas_Blank

Nicolas Blank

Founder, Group CEO, Architect, Podcaster, Author, MVP Office Apps & Services, MVP Azure, MCM & MCSM Messaging at NBConsult

Nicolas is the founder, as well as an architect, author, and speaker focused on Office 365 and Azure at NBConsult Group in South Africa, England, and Hong Kong. Nicolas is a Microsoft Certified Master for Exchange and Office 365, Microsoft MVP for Microsoft Office Apps and Services since March 2007.

Nicolas has co-authored the Microsoft Zero Trust Adoption Framework, published by Microsoft; “Microsoft Exchange Server 2013: Design, Deploy and Deliver an Enterprise Messaging Solution”, published by Sybex and available on Amazon; as well as authoring “Azure Site Recovery: IaaS Migration and Disaster Recovery,” published by Pluralsight.

Connect On LinkedIn