How to create a new Azure Active Directory service principal
Cmdlet Description:
A new Azure AD service principal is created when this cmdlet is executed. It assigns default parameter values if the parameter values are not specified by the user. The cmdlet can also use specified values for 'Role' and 'Scope' parameters to assign a Role to a service principal. If the Role and Scope parameters are not defined, the service principal takes a default value of "contributor" for the current subscription. The cmdlet can also create an application and add properties to it automatically if the user has not provided ApplicationID. The user can use Update-AzADApplication cmdlet to update parameter values.
PowerShell Syntax:
Example: Creating a Azure AD service principal
| Secret | : System.Security.SecureString |
| ServicePrincipalNames | : {00000000-0000-0000-0000-000000000000, http://azure-powershell-05-24-2019-18-23-43} |
| ApplicationId | : 00000000-0000-0000-0000-000000000000 |
| DisplayName | : azure-powershell-05-24-2019-18-23-43 |
| Id | : 00000000-0000-0000-0000-000000000000 |
| Type | : ServicePrincipal |
Description: The above example creates an AD service principal using default values for parameters that were not specified. Since an application ID is not provided, an application is created for the service principal. Role or Scope parameters are not specified either, so the created service principal is assigned the contributor role for the current subscription.
About ADAudit Plus
ADAudit Plus is a real-time, web-based Windows Active Directory change reporting software that audits, tracks, reports and alerts on Windows (Active Directory, workstations logon/logoff, file servers and servers), NetApp filers and EMC servers to help meet the demands of the much-needed security, audit and compliance.
With ADAudit Plus, track authorized/unauthorized AD management changes, access of users, GPO, groups, computer, OU. Track every file, folder modifications, access and permissions changes with 200+ detailed event-specific reports and get instant emails alerts. You can also export the results to XLS, HTML, PDF and CSV formats to assist in interpretation and computer forensics. For more information on ADAudit Plus, visit https://www.manageengine.com/active-directory-audit/.
Explore Active Directory auditing and reporting with ADAudit Plus.
- Related Products
- ADManager Plus Active Directory Management & Reporting
- ADAudit Plus Real-time Active Directory Auditing and UBA
- EventLog Analyzer Real-time Log Analysis & Reporting
- ADSelfService Plus Self-Service Password Management
- AD360 Integrated Identity & Access Management
- Log360 (On-Premise | Cloud) Comprehensive SIEM and UEBA
- AD Free Tools Active Directory FREE Tools
