Share via

App Registration

Krzysztof Raczka 0 Reputation points
2025-08-06T11:23:02.5766667+00:00

Hi

I have create App Registration than I given access to various resources on azure to this service principal,

When running

az role assignment list --assignee "{clientId}"

it returns me empty roles assigned to this app registration and it doesnt authorize access to the service

can you help ?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Manu Philip 20,456 Reputation points MVP Volunteer Moderator
    2025-08-06T11:48:35.9266667+00:00

    Hi Krzysztof Raczka

    I think, the Reader role is missing for reading the list

    Assign a Reader role to application at the scope of Subscription Level using the following command

    az role assignment create --assignee <APP_ID> --role "Reader" --scope /subscriptions/<SUBSCRIPTION_ID>

    After that, check if the issues is resolved

    az role assignment list --assignee <Application-id or Object-Id of application>

    Hope this helps.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.