Document minimum permissions required for creating Service Principals

[bhummerstone]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritise this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritise the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

After a lot of trial and error, I've found that the minimum permissions required for creating/deleting Service Principals is Application.ReadWrite.OwnedBy under API permissions; see the below screenshot:

However, this doesn't appear to be documented anywhere, and the recommended permissions for the Terraform service principal are User/Company Administrator, which is overkill just for Service Principal management.

New or Affected Resource(s)

• azuread_service_principal

Potential Terraform Configuration

References

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!