List tenants in az-ad collection uses different audience than the rest of the objects #128
Description
Summary
The az-ad collection tries to list tenants:
AzureHound/cmd/list-azure-ad.go
Lines 101 to 102 in abfd482
But the ListAzureADTenants function uses the resourceManager audience for its request:
Lines 61 to 69 in abfd482
This leads to an error when using JWT auth because the az-ad collection needs the Graph API audience.
2025-05-13T10:52:37-05:00 INF collecting azure ad objects...
2025-05-13T10:52:37-05:00 ERR unable to continue processing tenants error="invalid audience"
The rest of the collection steps in az-ad work as expected because they all have the Graph API audience.
Steps to reproduce
$env:GRAPH_JWT = (Get-AzAccessToken -ResourceUrl "https://graph.microsoft.com").Token
./AzureHound.exe --jwt $env:GRAPH_JWT --list az-ad --tenant "contoso.onmicrosoft.com" -o "./entraid.json"