Posture check: Azure Microsoft Entra ID users can consent to apps accessing company data on their behalf not set to verified publishers
Query: ```config from cloud.resource where cloud.type = 'azure' AND api.name = 'azure-active-directory-authorization-policy' AND json.rule = defaultUserRolePermissions.permissionGrantPoliciesAssigned[*] does not contain "ManagePermissionGrantsForSelf.microsoft-user-default-low"```