# Forestall ## Forestall - [Introduction](https://docs.forestall.io/fsprotect/readme.md) - [FSProtect - Active Directory Security Assessment](https://docs.forestall.io/fsprotect/readme/0x1-fsprotect.md): Disrupt the Adversaries' Active Directory Kill Chain - [Glossary](https://docs.forestall.io/fsprotect/readme/glossary.md): Terminology of the FSProtect - [Active Directory Glossary](https://docs.forestall.io/fsprotect/readme/glossary/glossary.md) - [Azure / Entra ID Glossary](https://docs.forestall.io/fsprotect/readme/glossary/azure-entra-id-glossary.md) - [AWS / IAM Glossary](https://docs.forestall.io/fsprotect/readme/glossary/aws-iam-glossary.md) - [GCP Glossary](https://docs.forestall.io/fsprotect/readme/glossary/gcp-glossary.md) - [Architecture](https://docs.forestall.io/fsprotect/readme/architecture.md): FSProtect Deploymeny Architecture - [Requirements](https://docs.forestall.io/fsprotect/readme/requirements.md) - [Installation](https://docs.forestall.io/fsprotect/readme/installation.md) - [Update](https://docs.forestall.io/fsprotect/readme/update.md) - [Dashboard](https://docs.forestall.io/fsprotect/dashboard.md) - [Active Directory Dashboard](https://docs.forestall.io/fsprotect/dashboard/0x1-dashboard.md): Single Pane of Glass for Entire Active Directory - [Azure / Entra ID Dashboard](https://docs.forestall.io/fsprotect/dashboard/azure-entra-id-dashboard.md) - [AWS Dashboard](https://docs.forestall.io/fsprotect/dashboard/aws-dashboard.md) - [GCP Dashboard](https://docs.forestall.io/fsprotect/dashboard/gcp-dashboard.md) - [Compliance](https://docs.forestall.io/fsprotect/compliance.md) - [Trend Insights](https://docs.forestall.io/fsprotect/trend-insights.md) - [Scans](https://docs.forestall.io/fsprotect/scans.md) - [New Scan](https://docs.forestall.io/fsprotect/scans/new-scan.md) - [Scans](https://docs.forestall.io/fsprotect/scans/scans.md) - [Policies](https://docs.forestall.io/fsprotect/scans/policies.md) - [AD Policies](https://docs.forestall.io/fsprotect/scans/policies/policies.md) - [Azure Policies](https://docs.forestall.io/fsprotect/scans/policies/azure-policies.md) - [AWS Policies](https://docs.forestall.io/fsprotect/scans/policies/aws-policies.md) - [GCP Policies](https://docs.forestall.io/fsprotect/scans/policies/gcp-policies.md) - [Issues](https://docs.forestall.io/fsprotect/issues.md) - [Impacts](https://docs.forestall.io/fsprotect/0x1-impacts.md) - [AD Identities](https://docs.forestall.io/fsprotect/ad-identities.md) - [Forests](https://docs.forestall.io/fsprotect/ad-identities/forests.md) - [Domains](https://docs.forestall.io/fsprotect/ad-identities/domains.md) - [Computers](https://docs.forestall.io/fsprotect/ad-identities/computers.md) - [Users](https://docs.forestall.io/fsprotect/ad-identities/users.md) - [Groups](https://docs.forestall.io/fsprotect/ad-identities/groups.md) - [GPOs](https://docs.forestall.io/fsprotect/ad-identities/gpos.md) - [OUs](https://docs.forestall.io/fsprotect/ad-identities/ous.md) - [MSAs](https://docs.forestall.io/fsprotect/ad-identities/msas.md) - [GMSAs](https://docs.forestall.io/fsprotect/ad-identities/gmsas.md) - [DMSAs](https://docs.forestall.io/fsprotect/ad-identities/dmsas.md) - [Local Users](https://docs.forestall.io/fsprotect/ad-identities/local-users.md) - [Local Groups](https://docs.forestall.io/fsprotect/ad-identities/local-groups.md) - [Certificate Authorities](https://docs.forestall.io/fsprotect/ad-identities/certificate-authorities.md) - [Certificate Templates](https://docs.forestall.io/fsprotect/ad-identities/certificate-templates.md) - [CA Certificates](https://docs.forestall.io/fsprotect/ad-identities/ca-certificates.md) - [Azure Identities](https://docs.forestall.io/fsprotect/azure-identities.md) - [Entra ID](https://docs.forestall.io/fsprotect/azure-identities/entra-id.md) - [Tenants](https://docs.forestall.io/fsprotect/azure-identities/entra-id/tenants.md) - [Users](https://docs.forestall.io/fsprotect/azure-identities/entra-id/users.md) - [Devices](https://docs.forestall.io/fsprotect/azure-identities/entra-id/devices.md) - [Groups](https://docs.forestall.io/fsprotect/azure-identities/entra-id/groups.md) - [Applications](https://docs.forestall.io/fsprotect/azure-identities/entra-id/applications.md) - [Service Principals](https://docs.forestall.io/fsprotect/azure-identities/entra-id/service-principals.md) - [Roles](https://docs.forestall.io/fsprotect/azure-identities/entra-id/roles.md) - [Administrative Units](https://docs.forestall.io/fsprotect/azure-identities/entra-id/administrative-units.md) - [Conditional Access Policies](https://docs.forestall.io/fsprotect/azure-identities/entra-id/conditional-access-policies.md) - [Azure Resource Management](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management.md) - [Management Groups](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management/management-groups.md) - [Subscriptions](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management/subscriptions.md) - [Resource Groups](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management/resource-groups.md) - [Key Vaults](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management/key-vaults.md) - [SQL Servers](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management/sql-servers.md) - [Virtual Machines](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management/virtual-machines.md) - [ARM Roles](https://docs.forestall.io/fsprotect/azure-identities/azure-resource-management/arm-roles.md) - [Microsoft Teams](https://docs.forestall.io/fsprotect/azure-identities/microsoft-teams.md) - [Teams Messaging Policies](https://docs.forestall.io/fsprotect/azure-identities/microsoft-teams/teams-messaging-policies.md) - [Teams Meeting Policies](https://docs.forestall.io/fsprotect/azure-identities/microsoft-teams/teams-meeting-policies.md) - [Teams Settings](https://docs.forestall.io/fsprotect/azure-identities/microsoft-teams/teams-settings.md) - [Teams External Access](https://docs.forestall.io/fsprotect/azure-identities/microsoft-teams/teams-external-access.md) - [Microsoft SharePoint](https://docs.forestall.io/fsprotect/azure-identities/microsoft-sharepoint.md) - [SharePoint Sites](https://docs.forestall.io/fsprotect/azure-identities/microsoft-sharepoint/sharepoint-sites.md) - [SharePoint Settings](https://docs.forestall.io/fsprotect/azure-identities/microsoft-sharepoint/sharepoint-settings.md) - [AWS Identities](https://docs.forestall.io/fsprotect/aws-identities.md) - [Users](https://docs.forestall.io/fsprotect/aws-identities/users.md) - [Groups](https://docs.forestall.io/fsprotect/aws-identities/groups.md) - [Roles](https://docs.forestall.io/fsprotect/aws-identities/roles.md) - [Policies](https://docs.forestall.io/fsprotect/aws-identities/policies.md) - [Organizations](https://docs.forestall.io/fsprotect/aws-identities/organizations.md) - [Accounts](https://docs.forestall.io/fsprotect/aws-identities/accounts.md) - [GCP Identities](https://docs.forestall.io/fsprotect/gcp-identities.md) - [Customers](https://docs.forestall.io/fsprotect/gcp-identities/customers.md) - [Users](https://docs.forestall.io/fsprotect/gcp-identities/users.md) - [Groups](https://docs.forestall.io/fsprotect/gcp-identities/groups.md) - [Devices](https://docs.forestall.io/fsprotect/gcp-identities/devices.md) - [Organizational Units](https://docs.forestall.io/fsprotect/gcp-identities/organizational-units.md) - [Roles](https://docs.forestall.io/fsprotect/gcp-identities/roles.md) - [Organizations](https://docs.forestall.io/fsprotect/gcp-identities/organizations.md) - [Folders](https://docs.forestall.io/fsprotect/gcp-identities/folders.md) - [Projects](https://docs.forestall.io/fsprotect/gcp-identities/projects.md) - [Service Accounts](https://docs.forestall.io/fsprotect/gcp-identities/service-accounts.md) - [Service Account Keys](https://docs.forestall.io/fsprotect/gcp-identities/service-account-keys.md) - [GPO Audit](https://docs.forestall.io/fsprotect/gpo-audit.md) - [GPO Comparison](https://docs.forestall.io/fsprotect/gpo-audit/gpo-comparison.md) - [RSoP Comparison](https://docs.forestall.io/fsprotect/gpo-audit/conflicts.md) - [Custom Baselines](https://docs.forestall.io/fsprotect/gpo-audit/custom-baselines.md) - [Credential Discovery](https://docs.forestall.io/fsprotect/credential-discovery.md) - [Summary](https://docs.forestall.io/fsprotect/credential-discovery/summary.md) - [Secrets](https://docs.forestall.io/fsprotect/credential-discovery/secrets.md) - [Settings](https://docs.forestall.io/fsprotect/credential-discovery/settings.md) - [Visualize](https://docs.forestall.io/fsprotect/visualize.md) - [Graph](https://docs.forestall.io/fsprotect/visualize/visualize.md) - [Tier0 Analysis](https://docs.forestall.io/fsprotect/visualize/tier0-analysis.md) - [Search & Reports](https://docs.forestall.io/fsprotect/search-and-reports.md) - [Active Directory Entities](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities.md) - [Domain](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/domain.md) - [Computer](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/computer.md) - [User](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/user.md) - [Group](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/group.md) - [GPO](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/grouppolicyobject.md) - [OU](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/organizationalunit.md) - [ManagedServiceAccount](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/managedserviceaccount.md) - [GroupManagedServiceAccount](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/groupmanagedserviceaccount.md) - [DelegatedManagedServiceAccount](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/delegatedmanagedserviceaccount.md) - [LocalUser](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/localuser.md) - [LocalGroup](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/localgroup.md) - [CertificateAuthority](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/certificateauthority.md) - [CertificateTemplate](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/certificatetemplate.md) - [CACertificate](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/cacertificate.md) - [SPN](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/spn.md) - [FGPP](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/fgpp.md) - [Container](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/container.md) - [Script](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/script.md) - [DNSZone](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/dnszone.md) - [Forest](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/forest.md) - [UnknownTrust](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/unknowntrust.md) - [DisplaySpecifier](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/displayspecifier.md) - [Azure Entities](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities.md) - [Entra ID](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id.md) - [Tenant](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/tenant.md) - [AdministrativeUnit](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/administrativeunit.md) - [Application](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/application.md) - [Device](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/device.md) - [User](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/user.md) - [Group](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/group.md) - [ServicePrincipal](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/serviceprincipal.md) - [ConditionalAccessPolicy](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/conditionalaccesspolicy.md) - [Role](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/entra-id/role.md) - [Azure Resource Management](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management.md) - [ManagementGroup](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management/managementgroup.md) - [Subscription](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management/subscription.md) - [ResourceGroup](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management/resourcegroup.md) - [VM](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management/vm.md) - [SQLServer](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management/sqlserver.md) - [KeyVault](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management/keyvault.md) - [ARMRole](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/azure-resource-management/armrole.md) - [Microsoft Teams](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-teams.md) - [TeamsMeetingPolicy](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-teams/teamsmeetingpolicy.md) - [TeamsMessagingPolicy](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-teams/teamsmessagingpolicy.md) - [TeamsSettings](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-teams/teamssettings.md) - [TeamsExternalAccessSettings](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-teams/teamsexternalaccesssettings.md) - [Microsoft SharePoint](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-sharepoint.md) - [SharePointSite](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-sharepoint/sharepointsite.md) - [SharePointSettings](https://docs.forestall.io/fsprotect/search-and-reports/azure-entities/microsoft-sharepoint/sharepointsettings.md) - [GCP Entities](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities.md) - [Customer](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/customer.md) - [User](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/user.md) - [Group](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/group.md) - [Device](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/device.md) - [Organizational Unit](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/organizational-unit.md) - [Role](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/role.md) - [Organization](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/organization.md) - [Folder](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/folder.md) - [Project](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/project.md) - [Service Account](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/service-account.md) - [Service Account Key](https://docs.forestall.io/fsprotect/search-and-reports/gcp-entities/service-account-key.md) - [AWS Entities](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities.md) - [IAM User](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-user.md) - [IAM Group](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-group.md) - [IAM Role](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-role.md) - [IAM Policy](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-policy.md) - [IAM Access Key](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-access-key.md) - [IAM Account](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-iam-account.md) - [Organization](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-organization.md) - [Vulnerability](https://docs.forestall.io/fsprotect/search-and-reports/vulnerability.md) - [Tier0](https://docs.forestall.io/fsprotect/search-and-reports/tier0.md) - [Tier2](https://docs.forestall.io/fsprotect/search-and-reports/tier2.md) - [Integrations](https://docs.forestall.io/fsprotect/integrations.md) - [CyberArk](https://docs.forestall.io/fsprotect/integrations/cyberark.md) - [Mail](https://docs.forestall.io/fsprotect/integrations/mail.md) - [Jira](https://docs.forestall.io/fsprotect/integrations/jira.md) - [Settings](https://docs.forestall.io/fsprotect/settings.md) - [User Settings](https://docs.forestall.io/fsprotect/settings/user-settings.md) - [API Tokens](https://docs.forestall.io/fsprotect/settings/api-tokens.md): Create an FSProtect API token and use it to connect MCP-compatible tools. - [LDAP](https://docs.forestall.io/fsprotect/settings/ldap.md) - [SSO](https://docs.forestall.io/fsprotect/settings/sso.md) - [FSProtect Configuration](https://docs.forestall.io/fsprotect/settings/sso/fsprotect-configuration.md) - [OneLogin Configuration](https://docs.forestall.io/fsprotect/settings/sso/onelogin-configuration.md) - [MonoSign Configuration](https://docs.forestall.io/fsprotect/settings/sso/monosign-configuration.md) - [Azure Configuration](https://docs.forestall.io/fsprotect/settings/sso/azure-configuration.md) - [Authentication](https://docs.forestall.io/fsprotect/settings/authentication.md) - [Roles and Permissions](https://docs.forestall.io/fsprotect/settings/roles-and-permissions.md) - [Audit Logs](https://docs.forestall.io/fsprotect/settings/audit-logs.md) - [Azure Configurations](https://docs.forestall.io/fsprotect/settings/azure-configurations.md) - [Login With Certificate](https://docs.forestall.io/fsprotect/settings/azure-configurations/login-with-certificate.md) - [Login With Client Secret](https://docs.forestall.io/fsprotect/settings/azure-configurations/login-with-client-secret.md) - [AWS Configurations](https://docs.forestall.io/fsprotect/settings/aws-configurations.md) - [GCP Configurations](https://docs.forestall.io/fsprotect/settings/gcp-configurations.md) - [Configuration With Google CLI](https://docs.forestall.io/fsprotect/settings/gcp-configurations/configuration-with-google-cli.md) - [Configuration With Google Cloud Platform](https://docs.forestall.io/fsprotect/settings/gcp-configurations/configuration-with-google-cloud-platform.md) - [Domain-Wide Delegation](https://docs.forestall.io/fsprotect/settings/gcp-configurations/domain-wide-delegation.md) - [Health Check](https://docs.forestall.io/fsprotect/health-check.md): The Health Check page displays real-time status of key components and system usage metrics, allowing quick monitoring of system health and resource utilization. - [Edges](https://docs.forestall.io/fsprotect/edges.md) - [AD](https://docs.forestall.io/fsprotect/edges/ad.md) - [AddAllowedToAct](https://docs.forestall.io/fsprotect/edges/ad/addallowedtoact.md) - [AddKeyCredentialLink](https://docs.forestall.io/fsprotect/edges/ad/addkeycredentiallink.md) - [AddMember](https://docs.forestall.io/fsprotect/edges/ad/addmember.md) - [ADMIN\_TO](https://docs.forestall.io/fsprotect/edges/ad/admin_to.md) - [AllExtendedRights](https://docs.forestall.io/fsprotect/edges/ad/allextendedrights.md) - [AllowedToAct](https://docs.forestall.io/fsprotect/edges/ad/allowedtoact.md) - [ALLOWED\_TO\_DELEGATE](https://docs.forestall.io/fsprotect/edges/ad/allowed_to_delegate.md) - [CanReadGMSAPassword](https://docs.forestall.io/fsprotect/edges/ad/canreadgmsapassword.md) - [CAN\_EXEC\_DCOM](https://docs.forestall.io/fsprotect/edges/ad/can_exec_dcom.md) - [CAN\_EXEC\_PWSH](https://docs.forestall.io/fsprotect/edges/ad/can_exec_pwsh.md) - [CAN\_RDP](https://docs.forestall.io/fsprotect/edges/ad/can_rdp.md) - [CertificateAutoenrollment](https://docs.forestall.io/fsprotect/edges/ad/certificateautoenrollment.md) - [CertificateEnrollment](https://docs.forestall.io/fsprotect/edges/ad/certificateenrollment.md) - [CreateAny](https://docs.forestall.io/fsprotect/edges/ad/createany.md) - [CreateComputer](https://docs.forestall.io/fsprotect/edges/ad/createcomputer.md) - [CreateDNSNode](https://docs.forestall.io/fsprotect/edges/ad/creatednsnode.md) - [CreateUser](https://docs.forestall.io/fsprotect/edges/ad/createuser.md) - [DCSync](https://docs.forestall.io/fsprotect/edges/ad/dcsync.md) - [DUMP\_SMSA\_PASSWORD](https://docs.forestall.io/fsprotect/edges/ad/dump_smsa_password.md) - [ForceChangePassword](https://docs.forestall.io/fsprotect/edges/ad/forcechangepassword.md) - [GenericAll](https://docs.forestall.io/fsprotect/edges/ad/genericall.md) - [GenericWrite](https://docs.forestall.io/fsprotect/edges/ad/genericwrite.md) - [GPLINK](https://docs.forestall.io/fsprotect/edges/ad/gplink.md) - [GPOWrite](https://docs.forestall.io/fsprotect/edges/ad/gpowrite.md) - [HAS\_CA](https://docs.forestall.io/fsprotect/edges/ad/has_ca.md) - [HAS\_SESSION](https://docs.forestall.io/fsprotect/edges/ad/has_session.md) - [HAS\_SPN](https://docs.forestall.io/fsprotect/edges/ad/has_spn.md) - [IN\_GPO](https://docs.forestall.io/fsprotect/edges/ad/in_gpo.md) - [IN\_GROUP](https://docs.forestall.io/fsprotect/edges/ad/in_group.md) - [IN\_LOCALGROUP](https://docs.forestall.io/fsprotect/edges/ad/in_localgroup.md) - [LAPSPassword](https://docs.forestall.io/fsprotect/edges/ad/lapspassword.md) - [ManageCA](https://docs.forestall.io/fsprotect/edges/ad/manageca.md) - [ManageCertificates](https://docs.forestall.io/fsprotect/edges/ad/managecertificates.md) - [ManageGPLink](https://docs.forestall.io/fsprotect/edges/ad/managegplink.md) - [Owner](https://docs.forestall.io/fsprotect/edges/ad/owner.md) - [PARENT\_OU](https://docs.forestall.io/fsprotect/edges/ad/parent_ou.md) - [ReadLAPSv2Password](https://docs.forestall.io/fsprotect/edges/ad/readlapsv2password.md) - [SelfMembership](https://docs.forestall.io/fsprotect/edges/ad/selfmembership.md) - [SIDHistory](https://docs.forestall.io/fsprotect/edges/ad/sidhistory.md) - [SQLAdmin](https://docs.forestall.io/fsprotect/edges/ad/sqladmin.md) - [SyncLAPSPassword](https://docs.forestall.io/fsprotect/edges/ad/synclapspassword.md) - [TRUSTED\_BY](https://docs.forestall.io/fsprotect/edges/ad/trusted_by.md) - [Write](https://docs.forestall.io/fsprotect/edges/ad/write.md) - [WriteAccountRestrictions](https://docs.forestall.io/fsprotect/edges/ad/writeaccountrestrictions.md) - [WriteCertificateApplicationPolicy](https://docs.forestall.io/fsprotect/edges/ad/writecertificateapplicationpolicy.md) - [WriteCertificateNameFlag](https://docs.forestall.io/fsprotect/edges/ad/writecertificatenameflag.md) - [WriteCertificateTemplates](https://docs.forestall.io/fsprotect/edges/ad/writecertificatetemplates.md) - [WriteDACL](https://docs.forestall.io/fsprotect/edges/ad/writedacl.md) - [WriteEnrollmentFlag](https://docs.forestall.io/fsprotect/edges/ad/writeenrollmentflag.md) - [WriteOverCertificateTemplate](https://docs.forestall.io/fsprotect/edges/ad/writeovercertificatetemplate.md) - [WriteOwner](https://docs.forestall.io/fsprotect/edges/ad/writeowner.md) - [WriteRASignature](https://docs.forestall.io/fsprotect/edges/ad/writerasignature.md) - [writeSPN](https://docs.forestall.io/fsprotect/edges/ad/writespn.md) - [Azure](https://docs.forestall.io/fsprotect/edges/azure.md) - [AZ\_ADD\_MEMBERS](https://docs.forestall.io/fsprotect/edges/azure/az_add_members.md) - [AZ\_ADD\_OWNER](https://docs.forestall.io/fsprotect/edges/azure/az_add_owner.md) - [AZ\_ADD\_SECRET](https://docs.forestall.io/fsprotect/edges/azure/az_add_secret.md) - [AZ\_APP\_ADMIN](https://docs.forestall.io/fsprotect/edges/azure/az_app_admin.md) - [AZ\_ARM\_OWNER](https://docs.forestall.io/fsprotect/edges/azure/az_arm_owner.md) - [AZ\_ARM\_ROLE\_SCOPED\_TO](https://docs.forestall.io/fsprotect/edges/azure/az_arm_role_scoped_to.md) - [AZ\_ASSIGNED\_MANAGED\_IDENTITY](https://docs.forestall.io/fsprotect/edges/azure/az_assigned_managed_identity.md) - [AZ\_BUILTIN\_PRIVILEGED\_ROLE](https://docs.forestall.io/fsprotect/edges/azure/az_builtin_privileged_role.md) - [AZ\_CLOUD\_APP\_ADMIN](https://docs.forestall.io/fsprotect/edges/azure/az_cloud_app_admin.md) - [AZ\_CONTRIBUTOR](https://docs.forestall.io/fsprotect/edges/azure/az_contributor.md) - [AZ\_CUSTOM\_PRIVILEGED\_ROLE](https://docs.forestall.io/fsprotect/edges/azure/az_custom_privileged_role.md) - [AZ\_EXECUTE\_COMMAND](https://docs.forestall.io/fsprotect/edges/azure/az_execute_command.md) - [AZ\_GET\_CERTIFICATES](https://docs.forestall.io/fsprotect/edges/azure/az_get_certificates.md) - [AZ\_GET\_KEYS](https://docs.forestall.io/fsprotect/edges/azure/az_get_keys.md) - [AZ\_GET\_SECRETS](https://docs.forestall.io/fsprotect/edges/azure/az_get_secrets.md) - [AZ\_GLOBAL\_ADMIN](https://docs.forestall.io/fsprotect/edges/azure/az_global_admin.md) - [AZ\_GROUP\_WRITEBACK](https://docs.forestall.io/fsprotect/edges/azure/az_group_writeback.md) - [AZ\_HAS\_ARM\_ROLE](https://docs.forestall.io/fsprotect/edges/azure/az_has_arm_role.md) - [AZ\_IN\_GROUP](https://docs.forestall.io/fsprotect/edges/azure/az_in_group.md) - [AZ\_KEY\_VAULT\_CONTRIBUTOR](https://docs.forestall.io/fsprotect/edges/azure/az_key_vault_contributor.md) - [AZ\_MG\_ADD\_MEMBER](https://docs.forestall.io/fsprotect/edges/azure/az_mg_add_member.md) - [AZ\_MG\_ADD\_OWNER](https://docs.forestall.io/fsprotect/edges/azure/az_mg_add_owner.md) - [AZ\_MG\_ADD\_SECRET](https://docs.forestall.io/fsprotect/edges/azure/az_mg_add_secret.md) - [AZ\_MG\_APPLICATION\_READWRITE\_ALL](https://docs.forestall.io/fsprotect/edges/azure/az_mg_application_readwrite_all.md) - [AZ\_MG\_APPROLEASSIGNMENT\_READWRITE\_ALL](https://docs.forestall.io/fsprotect/edges/azure/az_mg_approleassignment_readwrite_all.md) - [AZ\_MG\_DANGEROUS\_PERMISSION](https://docs.forestall.io/fsprotect/edges/azure/az_mg_dangerous_permission.md) - [AZ\_MG\_DIRECTORY\_READWRITE\_ALL](https://docs.forestall.io/fsprotect/edges/azure/az_mg_directory_readwrite_all.md) - [AZ\_MG\_GRANT\_APP\_ROLES](https://docs.forestall.io/fsprotect/edges/azure/az_mg_grant_app_roles.md) - [AZ\_MG\_GRANT\_ROLE](https://docs.forestall.io/fsprotect/edges/azure/az_mg_grant_role.md) - [AZ\_MG\_GROUPMEMBER\_READWRITE\_ALL](https://docs.forestall.io/fsprotect/edges/azure/az_mg_groupmember_readwrite_all.md) - [AZ\_MG\_GROUP\_READWRITE\_ALL](https://docs.forestall.io/fsprotect/edges/azure/az_mg_group_readwrite_all.md) - [AZ\_MG\_ROLEMANAGEMENT\_READWRITE\_DIRECTORY](https://docs.forestall.io/fsprotect/edges/azure/az_mg_rolemanagement_readwrite_directory.md) - [AZ\_MG\_SERVICEPRINCIPALENDPOINT\_READWRITE\_ALL](https://docs.forestall.io/fsprotect/edges/azure/az_mg_serviceprincipalendpoint_readwrite_all.md) - [AZ\_OWNER](https://docs.forestall.io/fsprotect/edges/azure/az_owner.md) - [AZ\_PARENT\_AU](https://docs.forestall.io/fsprotect/edges/azure/az_parent_au.md) - [AZ\_PARENT\_MANAGEMENT\_GROUP](https://docs.forestall.io/fsprotect/edges/azure/az_parent_management_group.md) - [AZ\_PARENT\_RESOURCE\_GROUP](https://docs.forestall.io/fsprotect/edges/azure/az_parent_resource_group.md) - [AZ\_PARENT\_SUBSCRIPTION](https://docs.forestall.io/fsprotect/edges/azure/az_parent_subscription.md) - [AZ\_PARTNER\_TIER2\_SUPPORT](https://docs.forestall.io/fsprotect/edges/azure/az_partner_tier2_support.md) - [AZ\_PASSWORD\_WRITEBACK](https://docs.forestall.io/fsprotect/edges/azure/az_password_writeback.md) - [AZ\_PRIVILEGED\_AUTH\_ADMIN](https://docs.forestall.io/fsprotect/edges/azure/az_privileged_auth_admin.md) - [AZ\_PRIVILEGED\_ROLE\_ADMIN](https://docs.forestall.io/fsprotect/edges/azure/az_privileged_role_admin.md) - [AZ\_RESET\_PASSWORD](https://docs.forestall.io/fsprotect/edges/azure/az_reset_password.md) - [AZ\_ROLE\_SCOPED\_TO](https://docs.forestall.io/fsprotect/edges/azure/az_role_scoped_to.md) - [AZ\_RUNS\_AS](https://docs.forestall.io/fsprotect/edges/azure/az_runs_as.md) - [AZ\_SECURITY\_ADMIN](https://docs.forestall.io/fsprotect/edges/azure/az_security_admin.md) - [AZ\_SQL\_ADMIN](https://docs.forestall.io/fsprotect/edges/azure/az_sql_admin.md) - [AZ\_VM\_CONTRIBUTOR](https://docs.forestall.io/fsprotect/edges/azure/az_vm_contributor.md) - [PARENT\_TENANT](https://docs.forestall.io/fsprotect/edges/azure/parent_tenant.md) - [AWS](https://docs.forestall.io/fsprotect/edges/aws.md) - [AWS\_ASSUME\_ROLE](https://docs.forestall.io/fsprotect/edges/aws/aws_assume_role.md) - [AWS\_ATTACHED\_POLICY](https://docs.forestall.io/fsprotect/edges/aws/aws_attached_policy.md) - [AWS\_CAN\_CREATE\_ACCESS\_KEY](https://docs.forestall.io/fsprotect/edges/aws/aws_can_create_access_key.md) - [AWS\_CAN\_CREATE\_LOGIN\_PROFILE](https://docs.forestall.io/fsprotect/edges/aws/aws_can_create_login_profile.md) - [AWS\_CAN\_CREATE\_POLICY\_VERSION](https://docs.forestall.io/fsprotect/edges/aws/aws_can_create_policy_version.md) - [AWS\_CAN\_DELETE\_ACCESS\_KEY](https://docs.forestall.io/fsprotect/edges/aws/aws_can_delete_access_key.md) - [AWS\_CAN\_SET\_DEFAULT\_POLICY\_VERSION](https://docs.forestall.io/fsprotect/edges/aws/aws_can_set_default_policy_version.md) - [AWS\_HAS\_ACCESS\_KEY](https://docs.forestall.io/fsprotect/edges/aws/aws_has_access_key.md) - [AWS\_IN\_ACCOUNT](https://docs.forestall.io/fsprotect/edges/aws/aws_in_account.md) - [AWS\_IN\_GROUP](https://docs.forestall.io/fsprotect/edges/aws/aws_in_group.md) - [AWS\_IN\_ORGANIZATION](https://docs.forestall.io/fsprotect/edges/aws/aws_in_organization.md) - [GCP](https://docs.forestall.io/fsprotect/edges/gcp.md) - [GCP\_BUILTIN\_PRIVILEGED\_ROLE](https://docs.forestall.io/fsprotect/edges/gcp/gcp_builtin_privileged_role.md) - [GCP\_CAN\_ACT\_AS\_SA](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_act_as_sa.md) - [GCP\_CAN\_BYPASS\_VPC\_SC](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_bypass_vpc_sc.md) - [GCP\_CAN\_CREATE\_COMPUTE](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_create_compute.md) - [GCP\_CAN\_CREATE\_SA\_KEYS](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_create_sa_keys.md) - [GCP\_CAN\_CREATE\_WIF\_POOL](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_create_wif_pool.md) - [GCP\_CAN\_DELETE\_PROJECT](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_delete_project.md) - [GCP\_CAN\_DEPLOY\_INFRA](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_deploy_infra.md) - [GCP\_CAN\_DISABLE\_ORG\_POLICY](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_disable_org_policy.md) - [GCP\_CAN\_FEDERATE\_IDENTITY](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_federate_identity.md) - [GCP\_CAN\_IMPERSONATE\_SA](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_impersonate_sa.md) - [GCP\_CAN\_MODIFY\_CUSTOM\_ROLES](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_modify_custom_roles.md) - [GCP\_CAN\_MODIFY\_TAGS](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_modify_tags.md) - [GCP\_CAN\_SET\_FOLDER\_IAMPOLICY](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_set_folder_iampolicy.md) - [GCP\_CAN\_SET\_ORG\_IAMPOLICY](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_set_org_iampolicy.md) - [GCP\_CAN\_SET\_PROJECT\_IAMPOLICY](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_set_project_iampolicy.md) - [GCP\_CAN\_SET\_SA\_IAMPOLICY](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_set_sa_iampolicy.md) - [GCP\_CAN\_SSH\_VM](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_ssh_vm.md) - [GCP\_CAN\_TRIGGER\_BUILD](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_trigger_build.md) - [GCP\_CAN\_UNLINK\_BILLING](https://docs.forestall.io/fsprotect/edges/gcp/gcp_can_unlink_billing.md) - [GCP\_CUSTOM\_PRIVILEGED\_ROLE](https://docs.forestall.io/fsprotect/edges/gcp/gcp_custom_privileged_role.md) - [GCP\_HAS\_DEVICE](https://docs.forestall.io/fsprotect/edges/gcp/gcp_has_device.md) - [GCP\_HAS\_ROLE](https://docs.forestall.io/fsprotect/edges/gcp/gcp_has_role.md) - [GCP\_HAS\_SERVICE\_ACCOUNT\_KEY](https://docs.forestall.io/fsprotect/edges/gcp/gcp_has_service_account_key.md) - [GCP\_IN\_FOLDER](https://docs.forestall.io/fsprotect/edges/gcp/gcp_in_folder.md) - [GCP\_IN\_PROJECT](https://docs.forestall.io/fsprotect/edges/gcp/gcp_in_project.md) - [GCP\_PARENT\_CUSTOMER](https://docs.forestall.io/fsprotect/edges/gcp/gcp_parent_customer.md) - [GCP\_PARENT\_ORGANIZATION](https://docs.forestall.io/fsprotect/edges/gcp/gcp_parent_organization.md) - [GCP\_PARENT\_OU](https://docs.forestall.io/fsprotect/edges/gcp/gcp_parent_ou.md) - [GCP\_ROLE\_SCOPED\_TO](https://docs.forestall.io/fsprotect/edges/gcp/gcp_role_scoped_to.md) - [GWS\_ADD\_GROUP\_MANAGER](https://docs.forestall.io/fsprotect/edges/gcp/gws_add_group_manager.md) - [GWS\_ADD\_GROUP\_MEMBER](https://docs.forestall.io/fsprotect/edges/gcp/gws_add_group_member.md) - [GWS\_ADD\_GROUP\_OWNER](https://docs.forestall.io/fsprotect/edges/gcp/gws_add_group_owner.md) - [GWS\_GRANT\_ROLE](https://docs.forestall.io/fsprotect/edges/gcp/gws_grant_role.md) - [GWS\_GROUP\_MANAGER](https://docs.forestall.io/fsprotect/edges/gcp/gws_group_manager.md) - [GWS\_GROUP\_OWNER](https://docs.forestall.io/fsprotect/edges/gcp/gws_group_owner.md) - [GWS\_IN\_GROUP](https://docs.forestall.io/fsprotect/edges/gcp/gws_in_group.md) - [GWS\_RESET\_PASSWORD](https://docs.forestall.io/fsprotect/edges/gcp/gws_reset_password.md) - [Release Notes](https://docs.forestall.io/fsprotect/release-notes.md)