Azure Service Principal - Best Practices

Question

Hello Community,

we have couple questions about using service principal in Microsoft azure for managing programmatic access of resources.

1. How we organize service principals?
2. creating multiple service principals is correct or not.
3. what is best way of using single service principal at multiple places with minimal effect(considering minimal dependency).

please share your thoughts here.

Thanks
Venkat

Answer 1

Hi @bodempudi venkata subbarao

Thank you for asking this question on the **Microsoft Q&A Platform. **

In this post @Siva-kumar-selvaraj respond to a similar question

You can use the same or have different Service principal for accessing Azure resources in general, but we recommend following the best practices highlighted here and general guidance about Securing service principals also, more importantly, monitor service principal sign-ins which enables you to assess whether and how you need to respond to potential issues such as unauthorized access.

Hope this helps,
Carlos Solís Salazar

----------

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
NOTE: To answer you as quickly as possible, please mention me in your reply.

---

Answer 2

Hi @bodempudi venkata subbarao

Replying to your query point wise

• How we organize service principals? - You can find / manage all your service principal in Enterprise App registration and find their association with another resource/ policy / App.
• Creating multiple service principals is correct or not. : It is correct , Its enhance security of your over-all cloud environment.
• What is best way of using single service principal at multiple places with minimal effect(considering minimal dependency) : A single service principle is associated to single resource only , you can not find same service principle with another resources , When you operate/Create Service principal , make sure you are Owner of subscription other wise you may face dependency in further operations.

Regards

------------------ If you find this answer helpful , please accept the answer -----------------------

Answer 3

Thank you all for your response.