Share via

How can I identify PIM service principles - which have only a string as Member Name?

Mathias Klemt 1 Reputation point
2021-07-06T10:26:29.69+00:00

Hi Team,

I have question regarding PIM.

In our Azure PIM > Management Group > Assigment-Overview configuration, I can find some active (direct) assignments in the list, which point to some Service Principles. So far so good, but some entries point to Service Principles without a "Member Name". As member name i can only see a sting. If I open the SP, find also only a string in "Member email" section.

How can I identify this service principles and check, if this SP is still active? 112070-greenshot-2021-07-06-12-23-54-window.png112080-greenshot-2021-07-06-12-22-54-window.png

Thanks
Mathias

Microsoft Security | Microsoft Entra | Other

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator
    2021-07-06T22:05:23.05+00:00

    @Mathias Klemt
    Thank you for your post!

    I wasn't able to replicate what you're seeing, but when it comes to checking what these Service Principals are, and to see if you're still actively using them, you can do this through the Azure Portal or PS.

    Azure Portal:
    1- Copy the Principal Name or Member Email (Application ID) into a notepad
    2- Navigate to Azure Active Directory -> Enterprise Applications -> Select All Applications -> Search for the Principal Name (Application ID)
    112228-findprincipal.gif

    AzureAD PowerShell: Using the AzureAD modules for PowerShell 

    #Sign in to AzureAD  
Connect-AzureAD  
  
#You can find the ObjectID by following the Azure Portal Steps above  
Get-AzureADServicePrincipal -ObjectId "<<Can be found using the AzurePortal steps above>>"

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.