What is service principal in Azure Active Directory?

Table of Contents

An Azure Active Directory (Azure AD) service principal is the local representation of an application object in a single tenant or directory. ‎It functions as the identity of the application instance. Service principals define who can access the application, and what resources the application can access.

How do I add a service principal to an Azure AD?

Sign in to your Azure Account through the Azure portal.
Select Azure Active Directory.
Select App registrations.
Select New registration.
Name the application. Select a supported account type, which determines who can use the application.

How do you manage service principal in Azure?

Manage service principals using the Azure portal

Sign in to the Azure portal.
Navigate to the Azure Active Directory page, using either the icon on the portal home page or searching for “Azure Active Directory” in the portal search bar.
Select Manage > App registrations in the left-hand navigation menu.

How do I get Azure service principal?

View the service principal

Select Azure Active Directory and then select Enterprise applications.
Under Application Type, choose All Applications and then select Apply.
In the search filter box, type the name of the Azure resource that has managed identities enabled or choose it from the list.

What is Azure service principal vs managed identity?

The key difference between Azure service principals and managed identities is that, with the latter, admins do not have to manage credentials, including passwords. To create a managed identity, go the Azure portal and navigate to the managed identity blade. Then, assign a role to the identity.

Is service principal same as service account?

What is a service principal? Azure has a notion of a Service Principal which, in simple terms, is a service account. On Windows and Linux, this is equivalent to a service account. These accounts are frequently used to run a specific scheduled task, web application pool or even SQL Server service.

What is the difference between managed identity and service principal?

What is a service principal?

A service principal is created in each tenant where the application is used and references the globally unique app object. The service principal object defines what the app can actually do in the specific tenant, who can access the app, and what resources the app can access.

What is the difference between service principal and service account?

Is service principal same as managed identity?

Put simply, the difference between a managed identity and a service principal is that a managed identity manages the creation and automatic renewal of a service principal on your behalf.

How many service principals does Azure have?

There are three types of service principal: Application – The type of service principal is the local representation, or application instance, of a global application object in a single tenant or directory.

What is service principal in Azure vs managed identity?

What is service principal and managed identity in Azure?

An Azure service principle is like an application, whose tokens can be used by other azure resources to authenticate and grant access to azure resources. Managed identities are service principals of a special type, which are locked to only be used with Azure resources.