Service Principal for multiple Azure subscriptions

Hello @Nibbler

A service principal is the local representation, or application instance, of a global application object in a single Azure AD tenant or directory. A service principal is a concrete instance created from the application object and inherits certain properties from that application object.

https://learn.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals

If you have multiple Azure Subscription in one Azure AD tenant you may use your single Service Principal across all of your Azure Subscriptions.

This script may help you:

data "azurerm_subscription" "example-subscription" {  
    subscription_id = "959e460c-209e-43d7-a6e9-e30c7170b691"  
}  
  
# Azure AD App  
resource "azuread_application" "example-subscription" {  
  name                       = "example-subscription"  
  available_to_other_tenants = false  
}  
  
# Service Principal associated with the Azure AD App  
resource "azuread_service_principal" "example-subscription" {  
  application_id = azuread_application.example-subscription.application_id  
}  
  
# Random string to be used for Service Principal password  
resource "random_password" "password-subscription" {  
  length  = 32  
  special = true  
}  
  
# Service Principal password  
resource "azuread_service_principal_password" "example-subscription" {  
  service_principal_id = azuread_service_principal.example-subscription.id  
  value                = random_password.password-subscription.result  
  end_date_relative    = "17520h"  
}  
  
# Role assignment for service principal  
resource "azurerm_role_assignment" "example-subscription" {  
  scope                = data.azurerm_subscription.example-subscription.id  
  role_definition_name = "Contributor"  
  principal_id         = azuread_service_principal.example-subscription.id  
}  

Hope this helps with your query,

----
--If the reply is helpful, please Upvote and Accept as answer--

Hello @Limitless Technology

Thanks for your comment. Should this be run as one/single script?

Thanks