An adversary may add additional roles or permissions to an adversary-controlled cloud account to maintain persistent access to a tenant.

Tactics
TA0003 TA0004

Sub-technique of
T1098


See: MITRE ATT&CK