Configuration steps for Azure Service Principal User and Credentials - Support and Troubleshooting

Configuration steps for Azure Service Principal User and Credentials Prerequisites

You must have User Access Administrator or Role Based Access Control Administrator permissions, or higher, to create a service principal.

Method 1: Create a Service Principal using Azure CLI

Step 1: Install or Open Azure CLI

If not installed:

Install Azure CLI Step 2: Log in to Azure

az login

This opens a browser window where you authenticate with your Azure credentials.

Step 3: Create the Service Principal

Run:

az ad sp create-for-rbac --name --role --scopes

Parameters:

--name → Unique name for Service Principal. --role → Role like Contributor , Reader , Owner , or custom. --scopes → Resource scope (e.g., subscription, resource group, specific resource). Example:

az ad sp create-for-rbac --name my-app-sp --role Contributor –scopes /subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Output:

json

CopyEdit

{

"appId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",

"displayName": "my-app-sp",

"password": "XXXXXXXXXXXXXX",

"tenant": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

}

Step 4: Store These Credentials Securely

appId → Client ID password → Client Secret tenant → Tenant ID These are used for authenticating in code or automation (e.g., with Terraform, Ansible, etc.).

Method 2: Create a Service Principal in Azure Portal (Manually)

Step 1: Sign in to Azure Portal

https://portal.azure.com

Step 2: Go to Azure Active Directory

Step 3: Click on App registrations → New registration

Step 4: Register the Application

Name : e.g., example-app Supported account types : Usually "Accounts in this organizational directory only" (Optional) Redirect URI Click Register Step 5: Create a Client Secret

Go to Certificates & secrets → New client secret Add a description and set expiry Click Add Copy the Value shown (Client Secret) Step 6: Assign Role to the Application

Go to the Resource Group or Subscription where access is needed Click Access control (IAM) → Add → Add role assignment Select role (e.g., Contributor) Select the app under Members Save