Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.