Create An Azure AD App & Service Account

Application Registration in Active Directory

  1. On Azure Portal -> Azure Active Directory -> App Registration:

    On Azure Portal -> Azure Active Directory -> App Registration

    Create a "New Registration" which will be use as a Service Account for Akeyless Application.

    Create a "New Registration" which will be use as a Service Account for Akeyless Application.

  2. Once the resource is created, navigate to Overview and note the Application (client) ID and Directory (tenant) ID.

    Once the resource is created, navigate to Overview and note the Application (client) ID and Directory (tenant) ID.

Configure permission for Microsoft Graph

  1. On the left pane, select API Permission, select Microsoft Graph:

    On the left pane, select API Permission, select Microsoft Graph.

  2. On the Request API Permissions, select Application permission:

    On the Request API Permissions, select Application permission.

  3. Scroll down to User and check the User.ReadWrite.All:

    Scroll down to User and check the User.ReadWrite.All

  4. After Updating the permissions, an admin must grant consent:

    After Updating the permissions, an admin must grant consent.

    After Updating the permissions, an admin must grant consent.

Required Permissions

ActionPermissions
Create/Delete userUser.ReadWrite.All, Directory.ReadWrite.All
Add user to groupGroupMember.ReadWrite.All, Group.ReadWrite.All, Directory.ReadWrite.All
Add user roleRoleManagement.ReadWrite.Directory
Create/Delete application secretApplication.ReadWrite.OwnedBy, Application.ReadWrite.All

Certificate & Secrets

  1. Navigate to Certificate & Secrets on the left pane, create a New Client Secret.

    Navigate to Certificate and Secrets on the left pane, create a New Client Secret.

  2. Save the client secret, as it will not be retrievable once you navigate elsewhere:

    Save the client secret, as it will not be retrievable once you navigate elsewhere.


Footer Section