Questions tagged [service-principal]

127 questions
13
votes
1 answer

Authentication difference between using AAD app key and Service Principal Password

To run applications in Azure, I need to create an Application in Azure AD and a corresponding Service Principal. Then my application authenticates against this App/Principal pair. To authenticate, I can create an application key in the App…
9
votes
2 answers

AzureAD PowerShell New-AzureRmRoleAssignment keeps failing

I'm working on a powershell script that will create a Resource Group, register the included application (in this example, a Web Api) to the associated AAD. But, when calling trying to assign Reader rights, it keeps on failing. I've started from the…
9
votes
2 answers

Using Azure KeyVault, cannot find object in Azure Active Directory tenant

Using Azure KeyVault I have set up a ResourceGroup, KeyVault and Key by following this guide: https://azure.microsoft.com/en-gb/documentation/articles/key-vault-get-started/ I have set up the application client in Active Directory. However when I…
Banford
  • 2,331
  • 4
  • 21
  • 34
8
votes
2 answers

How to give permissions to AKS to access ACR via terraform?

Question and details How can I allow a Kubernetes cluster in Azure to talk to an Azure Container Registry via terraform? I want to load custom images from my Azure Container Registry. Unfortunately, I encounter a permissions error at the point…
hey
  • 1,402
  • 2
  • 16
  • 36
6
votes
2 answers

Azure - authenticating to KeyVault using Service Principle returns an Unauthorized exception

I'm trying to access KeyVault from an .net Core console application, using a Service Principle (I have the App Id and App Secret). Here's my code: var client = new KeyVaultClient(GetAccessToken); var secret =…
Rob
  • 65
  • 6
5
votes
0 answers

Azure DataLake with DVC

We are thinking to use DVC for versioning input data for DataScience project. my data resides in Azure DataLake Gen1. how do i configure DVC to push data to Azure DataLake using Service Principal? i want DVC to store cache and data into Azure…
Radhi
  • 6,035
  • 13
  • 41
  • 65
5
votes
1 answer

Service principal privileges for app registration creation

I'm using service principal as login item for azure cli. The role of this service principal is "owner". I'm trying to run: az ad app list and az ad app create --display-name "Test application 2" and getting error: Directory permission is needed…
Dzior
  • 1,275
  • 11
  • 26
4
votes
2 answers

How to obtain bearer token for azure service principal with C#

I need to get the bearer access token for service principal. I want to use it in C# application. Given that I have principial Id and secret and tenant id, how can I obtain it? EDIT: to be more specific: I have service principal with client_id and…
Dzior
  • 1,275
  • 11
  • 26
4
votes
2 answers

Azure Function using MSI - Error Requesting Token

I have a Function in Azure, which has MSI (Managed Service Identity) enabled which I am trying to use to access an Azure based WebAPI (App Service WebApp) which in turn has Azure AD Authentication enabled (all same Azure Directory). My WebAPI has an…
3
votes
1 answer

service principal account on-prem AD Connect sync

creating an SPN in Azure (single AD tenant) works very well, however, due some compliance reasons, organization says we have to creaty every user (including service ones) using on-prem AD, then sync via AD connect to Azure AD tenant. That works very…
3
votes
2 answers

Azure AKS Public IP in Non-standard Resource Group

I've been trying to manage an Azure Kubernetes Service (AKS) instance via Terraform. When I create the AKS instance via the Azure CLI per this MS tutorial, then install an ingress controller with a static public IP, per this MS tutorial, everything…
3
votes
4 answers

Connect to Azure SQL Database from DataBricks using Service Principal

I have a requirement to connect to Azure SQL Database from Azure Databricks via Service Principal. Tried searching forums but unable to find the right approach. Any help is greatly appreciated. Tried a similar approach with SQL User ID and Password…
SDR
  • 343
  • 2
  • 16
3
votes
1 answer

How do you get a token for an azure managed identity via REST interface?

This question refers to the article: https://docs.microsoft.com/en-us/azure/app-service/app-service-managed-service-identity I'm trying to figure out how I can simulate using the service principal that is generate for my azure application to work…
darewreck
  • 2,375
  • 4
  • 33
  • 61
3
votes
2 answers

Azure Service Principal pull images from Container Registry

I have created a Azure Service Principal like this az ad sp create-for-rbac --name $SERVICE_PRINCIPAL_NAME --scopes $ACR_REGISTRY_ID --role reader after logging in (az login --service-principal -u $SERVICE_PRINCIPAL_NAME -p $SERVICE_PRINCIPAL_ID…
3
votes
3 answers

How to log in to Azure service principal

Connect-AzureRMAccount doesn't work. I don't care. I don't want to run through the process of needing a PhD to understand why PowerShell never wants to work. So I'm going to use Login-AzureRMAccount I've followed the docs. Of course it's inadequate…
1
2 3
8 9