403 Directory_QuotaExceeded when trying to add permissions for more than 50 APIs to an AAD Application Registration

AG 21 Reputation points
2021-11-17T13:56:01.083+00:00

I am trying to add a tad more than 50 APIs (and respective permissions) to an AAD Application Registration on an Azure Premium Sub, be it in an automated fashion via Powershell, or old-school style (manually via Azure Portal). This result in an error : Quota exceeded

My question, alas not directly Programing Related, has someone reached this hard limit of 50 APIs for an AppReg and found a way to override it ?

Subsequent question: as the error message suggest (see screenshots), there seems to exist a "global application object limit" or a Quota defined somewhere in the AAD - but no documentation has been found about this very subject - anyone with knowledge about this AAD quota configuration ?

For what it's worth, I wrote an error reproducing Powershell script that creates a first AppReg, then 51 others, each with one AppRole, and finally tries to add the 51 AppRoles as APIs (+ permissions) on the first Appreg, it fails when updating the primary AppReg with more than 51 APIs (+ permissions) - below 51 everything goes smoothly

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,651 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,561 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 95,666 Reputation points MVP
    2021-11-17T14:09:49.277+00:00

    The 50 APIs limit has been around for a while. They just announced "total number of permissions" limit too, the documentation is the process of updating (https://github.com/microsoftgraph/microsoft-graph-docs/pull/14963)
    Afaik it's a hard limit, so you'll have to rethink your approach.


0 additional answers

Sort by: Most helpful