1
votes

I have created an Service Principal and when I tried to run "az ad sp create-for-rbac --sdk-auth > test.azureauth" y received the following error:

"insufficient privileges to complete the operation"

I gave the following permissions:

Microsoft Graph:

Application.ReadWrite.All

Application.ReadWrite.OwnedBy

Directory.Read.All

Directory.ReadWrite.All

User.Read

But with this permissions is still failing

Any ideas?

1
Application.ReadWrite.All - this should be enough. you sure you gave it permissions and did logout\login?4c74356b41

1 Answers

3
votes

Assign Permission to Azure Active Directory Graph then it will work well.

enter image description here

Also, you could assign Global administrator role to your service principal.

Note : This will take several minutes to take effect.

enter image description here