Access to Azure Apps

Question

Hi All

i have a user and the user requires access to Enterprise Applications i.e user wants to create Enterprise Applications. Under Azure Active Directory Roles and Administrators-->Application Developer. If i provide user application developer access will he be able to create Enterprise Applications.

Answer 1

The Application Developer Role will provide the ability to create App Registrations, but is only necessary in a Azure AD tenant where users are restricted from creating app registrations:

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#application-developer

If you want a user to be able to manage Enterprise Applications, that is, registering/creating applications that are external to the organization (such as Salesforce, ServiceNow, etc), you would want to provide the user Application Administrator or Cloud Application Administrator

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#application-administrator
https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#cloud-application-administrator

I would note that this level of access is considered privileged and should only be granted to users who align to this role within your organization. If you simply want the user to be able to manage certain Enterprise Applications, a privileged user can create the Enterprise Application and then delegate control.

Application consent for delegated permissions and application permissions for Microsoft Graph can only be performed by Global Admins.