Azure：将角色添加到应用注册的 client_secret

Question

I'm not comfortable with azure configuration.

We have an app registration , that is configured with roles, group and users.

Everything is ok, but our security policy enforce MFA for connexion. That's a trouble for our automated tests.

Following that post we created a client secret Using App Registrations//Certficates & Secrets. Authentication is ok, and I can get a token when using postman but no role is assign.

The problem is that I can't figure how to add a role for that client secret !

Can you help?

Answer 1

You assign roles to users, groups, service principals, or managed identities at a particular scope.

To assign roles from the Azure portal:

1. Browse to Subscriptions blade.
2. Select your Subscription.
3. Go to Access control (IAM) .
4. Select Add role assignments and select the Role you wish to assign.
5. Search for your App Registration/Service Principal.
6. Save.

Note that as a prerequisite to be able to assign Azure roles, you must have Microsoft.Authorization/roleAssignments/write permissions, such as User Access Administrator or Owner .

Check Assign Azure roles using the Azure portal for more details.