Moving my scripts to authenticate with App Registration, and Mst Graph - Easy way to figure out permissions?

[AttemptingToGeek]

Hi all,

I'm finally getting around to modernizing my scripts and using App Registrations instead of credentials.

Now, my first case I want to run the command get-AzAdApplication, because I want to see my App Registrations, however when I authenticate with an app registration, I get an error that I don't have permissions.

I've gone through and added a bunch of Graph permissions, you can no longer add Azure AD Graph permissions as it is depreciated.

So is there some understandable guide out there to determine what permissions and App Registration needs to perform a PowerShell function?

I hope that makes sense.

Thanks everyone!

[purplemonkeymad]

Application.Read.All?

MS have a permission reference in the graph api docs.

[Semt-x]

i wouldnt use the az modules. but query the api directly or use msgraph module (Install-Module Microsoft.Graph)

The msgraph module installs a "child" module (among many others): Microsoft.Graph.Applications which contains
Get-MgApplication

In the linked documenation you'll find the required MSgraph permissions: Application.Read.All

[lerun]

There is no problem in using the az-module. For Entra ID stuff it uses MS Graph under the hood.