Cannot Create App Registrations

Question

Hi,
I want to add an app registrations with a service principal auth on command line. But it gives me error below.

Insufficient privileges to complete the operation.

I login on powershell like below

az login --service-principal -u $env:AZUREPORTAL_SERVICEPRINCIPALFORAPP_APPID -p $env:AZUREPORTAL_SERVICEPRINCIPALFORAPP_SECRETVALUE --tenant $env:AZUREPORTAL_TENANTID

my service principal user: apps-ozgur-service-principal

it is Contributor.

it has these api permissions:

it has Cloud Application Administrator role

and users are allowed to register apps

But still it gives the error.

Answer 1

Hi Hasan Özgür Güçlü ,The error message "Insufficient privileges to complete the operation" indicates that the service principal does not have the necessary permissions to complete the operation. You can try to grant the service principal the required permissions by assigning the "Owner" role to it.

To assign the "Owner" role to the service principal, you can use the following command:

az role assignment create --assignee <service-principal-object-id> --role Owner

Replace <service-principal-object-id> with the object ID of the service principal. You can find the object ID of the service principal using the following command:

az ad sp show --id <service-principal-app-id> --query objectId

Replace <service-principal-app-id> with the application ID of the service principal.

Please let me know if this works or if you have any questions.

If this answer helped you please mark it as "Verified" so other users can reference it.

Thank you,

James

Answer 2

Hi @James Hamil , Hasan Özgür Güçlü What was the fix for that issue? I encounter the same problem.

Thank you!