App governance and OAuth app risk
How app governance in Defender for Cloud Apps inventories OAuth apps registered in Entra ID, Google Workspace and Salesforce, scores their permissions and data usage, detects consent phishing and anomalous app behaviour, and how it fits with Entra user consent settings and the admin consent workflow.