Maximum App Roles i can create inside an application

Question

Maximum App Roles i can create inside an application

Hi,

I am working on SSO integration and managed to deploy it with about ~600 App Roles for my CRM.

The next party will be to create some 650 more Groups and assign them an App Role.

Somewhere in the QnA and Learning forum, I read that maximum App Role number that can be created per application is 1000.

Is there any way to go above this limit?

Thanks,

Rukmini 30,615 Reputation points Microsoft External Staff Moderator

2026-02-05T13:26:00.4966667+00:00
Hey Kristijan,

It sounds like you're working on expanding your SSO integration and potentially hitting a limit with the App Roles in Azure. You mentioned creating around 600 App Roles already and looking to add 650 more, which would bring you close to the threshold.

To clarify, you are correct that the maximum number of App Roles that can be created per application in Azure is indeed 1,000. Unfortunately, there is currently no way to exceed this limit. Each application you register in Microsoft Entra ID (formerly Azure Active Directory) can host a maximum of 1,000 App Roles.

Given this limit, if you find yourself needing to assign more roles, you might consider the following options:

Streamline Roles: Assess whether all current roles are necessary or if some can be consolidated to reduce the total number.

Separate Applications: If possible, you could create additional applications that serve similar purposes and allow for additional App Roles.

If you still need more flexibility beyond this limit or have concerns regarding organization of roles, it can be beneficial to use security groups strategically along with App Roles, as groups can be assigned to roles to manage permissions in a more organized manner.

Let me know if you need assistance with anything else or if you'd like to explore any of these options further!

References:

Creating App roles, users and groups to App Registration

Microsoft Entra ID Overview

App Roles in Enterprise Apps

Hope this helps!

Note: This content was drafted with the help of an AI system. Please verify the information before relying on it for decision-making.

1 answer

Your answer

Rukmini 30,615 Reputation points Microsoft External Staff Moderator

2026-02-05T13:26:00.4966667+00:00

Hey Kristijan,

It sounds like you're working on expanding your SSO integration and potentially hitting a limit with the App Roles in Azure. You mentioned creating around 600 App Roles already and looking to add 650 more, which would bring you close to the threshold.

To clarify, you are correct that the maximum number of App Roles that can be created per application in Azure is indeed 1,000. Unfortunately, there is currently no way to exceed this limit. Each application you register in Microsoft Entra ID (formerly Azure Active Directory) can host a maximum of 1,000 App Roles.

Given this limit, if you find yourself needing to assign more roles, you might consider the following options:

Streamline Roles: Assess whether all current roles are necessary or if some can be consolidated to reduce the total number.

Separate Applications: If possible, you could create additional applications that serve similar purposes and allow for additional App Roles.

If you still need more flexibility beyond this limit or have concerns regarding organization of roles, it can be beneficial to use security groups strategically along with App Roles, as groups can be assigned to roles to manage permissions in a more organized manner.

Let me know if you need assistance with anything else or if you'd like to explore any of these options further!

References:

Creating App roles, users and groups to App Registration

Microsoft Entra ID Overview

App Roles in Enterprise Apps

Hope this helps!

Note: This content was drafted with the help of an AI system. Please verify the information before relying on it for decision-making.

Answer 1

Raja Pothuraju 45,955 Microsoft External Staff Moderator

Hello @Rankovikj, Kristijan (contracted),

A user, group, or service principal can be assigned a maximum of 1,500 app roles. Based on your requirement, there should be no restriction as long as you remain within this limit.

It is not possible to increase this number, as it is a hardcoded service limit. Custom exceptions or tenant-specific adjustments are not supported.

For reference, please see the official documentation: User's image

https://learn.microsoft.com/en-us/entra/identity/users/directory-service-limits-restrictions

Share via

Maximum App Roles i can create inside an application

References:

1 answer

Your answer