Adding Scopes to a registered Service Principal

Question

Hi there,

We have a registered Service Principal (Enterprise Application) being used by several users granting us delegated permissions.

We'd like to add an additional application (not delegated) permission to this service principal. For context, it is the CallRecords.Read.All permission.

My question is, how would this affect existing users, and our service principal? I couldn't find any documentation, but I'm curious if this would cause their existing tokens to invalidate, or would they continue working with the original scopes granted before we added an additional one.

Additionally, is it fine to have a service principal with delegated & application API permissions? I'd assume yes for this one.

Appreciate any help, thanks.

Answer 1

It should continue to work fine but mixing delegated and application perms is generally not recommended:

This video explains why:

https://www.youtube.com/watch?v=M5yXU6oWchU