How to create a user and assign custom roles and how to get the API key

Question

How to create a user and assign custom roles and how to get the API key

Tarak Raja 0

How to create a group having custom roles/privileges to access the resources and assign users to that group to access those resources.

Sampath 3,750 Reputation points Microsoft External Staff Moderator

2025-06-12T11:29:35.72+00:00
Hello @Tarak Raja ,
Here's a step-by-step guide to help you create a user, define custom roles, assign them via a group, and retrieve an API key in Microsoft Entra ID:

Create a Custom Role

You can define a custom role with specific permissions using the Microsoft Entra admin center:

Go to Microsoft Entra admin center → Roles & admins.

Click + New custom role.

On the Basics tab, give your role a name and description.

On the Permissions tab, search and select the permissions you want (e.g., microsoft.directory/applications/credentials/update).

Review and Create the role.

More details are available in Microsoft’s custom role creation guide.

Create a Role-Assignable Group

To assign roles to a group:

Go to Groups → + New group.

Choose Security as the group type.

Enable “Azure AD roles can be assigned to the group”.

Add members (users) to the group.

Assign the Custom Role to the Group

Go to Roles & admins.

Select your custom role.

Click Add assignments → Choose the group you created.

This allows all group members to inherit the role permissions. You can find more on this in Microsoft’s role assignment documentation.

Create a User

Go to Users → + New user.

Fill in the user details and assign them to the group you created.

If you're registering an app and need an API key:

Go to App registrations → + New registration.

After creating the app, go to Certificates & secrets.

Click + New client secret → Add a description and expiration.

Copy the value immediately—this is your API key.

Your answer

Sampath 3,750 Reputation points Microsoft External Staff Moderator

2025-06-12T11:29:35.72+00:00

Hello @Tarak Raja ,
Here's a step-by-step guide to help you create a user, define custom roles, assign them via a group, and retrieve an API key in Microsoft Entra ID:

Create a Custom Role

You can define a custom role with specific permissions using the Microsoft Entra admin center:

Go to Microsoft Entra admin center → Roles & admins.

Click + New custom role.

On the Basics tab, give your role a name and description.

On the Permissions tab, search and select the permissions you want (e.g., microsoft.directory/applications/credentials/update).

Review and Create the role.

More details are available in Microsoft’s custom role creation guide.

Create a Role-Assignable Group

To assign roles to a group:

Go to Groups → + New group.

Choose Security as the group type.

Enable “Azure AD roles can be assigned to the group”.

Add members (users) to the group.

Assign the Custom Role to the Group

Go to Roles & admins.

Select your custom role.

Click Add assignments → Choose the group you created.

This allows all group members to inherit the role permissions. You can find more on this in Microsoft’s role assignment documentation.

Create a User

Go to Users → + New user.

Fill in the user details and assign them to the group you created.

If you're registering an app and need an API key:

Go to App registrations → + New registration.

After creating the app, go to Certificates & secrets.

Click + New client secret → Add a description and expiration.

Copy the value immediately—this is your API key.

Share via

How to create a user and assign custom roles and how to get the API key

Your answer