Documentation

Create An Azure AD App & Service Account

Suggest Edits

Application Registration in Active Directory:

  1. On Azure Portal -> Azure Active directory -> App Registration:
1024

Create a "New Registration" which will be use as a Service Account for Akeyless Application.

1024
  1. Once the resource is created, navigate to Overview and note the Application (client) ID and Directory (tenant) ID.
1024

Configure permission for Microsoft Graph:

  1. On the left pane, select API Permission , select Microsoft Graph:
1348
  1. On the Request API Permissions select Application permission :
1024
  1. Scroll down to User and check the User.ReadWrite.All:
1024

The following permissions required:

Action:Permissions:
Create/Delete userUser.ReadWrite.All, Directory.ReadWrite.All
Add user to groupGroupMember.ReadWrite.All, Group.ReadWrite.All and Directory.ReadWrite.All
Add user roleRoleManagement.ReadWrite.Directory
Create\Delete Application secretApplication.ReadWrite.OwnedBy, Application.ReadWrite.All
  1. After Updating the permissions, an admin must grant consent:
1024 1024

Certificate & Secrets:

  1. Navigate to Certificate & Secrets on the left pane, create a New Client Secret.
1024
  1. Save the client secret, as it will not be retrievable once you move to other page/resource:
1024

Updated about 1 year ago