How to create Azure Active Directory service principal?
When an Azure AD application is registered using the Azure portal or a PowerShell command, two objects are created in the Azure AD tenant: For more information on Azure AD applications, see Application and service principal objects in Azure Active Directory and Create an Azure service principal with Azure PowerShell.
Do you have to be an administrator to use Microsoft Graph security API?
To further protect sensitive security data, the Microsoft Graph Security API also requires users to be assigned the Azure AD Security Reader role. For details, see Administrator role permissions in Azure Active Directory and Assign administrator and non-administrator roles to users with Azure Active Directory.
Can a service principal be an admin in SQL?
*EDIT: The AAD server admin was creating via the ARM template, notably if you tried creating manually via the portal, you cannot select service principals as admin users. But interestingly you can see the service principal name ok in the portal after creation using ARM instead.
How does Azure Active Directory work with SQL?
Azure Active Directory (Azure AD) supports user creation in Azure SQL Database (SQL DB) on behalf of Azure AD applications (service principals). This functionality is already supported for SQL Managed Instance. This article applies to applications that are integrated with Azure AD, and are part of Azure AD registration.
How to assign Directory readers role in Azure AD?
In public preview, you can assign the Directory Readers role to a group in Azure AD. The group owners can then add the managed identity as a member of this group, which would bypass the need for a Global Administrator or Privileged Roles Administrator to grant the Directory Readers role.
How to grant permission in Azure AD Directory?
Grant the Azure AD Directory Readers permission to the server identity created or assigned to the server. The Azure AD user who is granting this permission must be part of the Azure AD Global Administrator or Privileged Roles Administrator role.
What can a privileged authentication administrator do in azure?
The Privileged authentication administrator role has permission can force re-registration and multi-factor authentication for all users. Users with this role can change credentials for people who may have access to sensitive or private information or critical configuration inside and outside of Azure Active Directory.