https://gotoguy.blog/tags/entraid/EntraID - Tag - GoToGuy BlogHugo -- gohugo.ioen-usThu, 23 May 2024 07:48:18 +0000https://gotoguy.blog/2024/05/23/add-graph-application-permissions-to-managed-identity-using-bicep-graph-extension/Thu, 23 May 2024 07:48:18 +0000Jan Vidar Elvenhttps://gotoguy.blog/2024/05/23/add-graph-application-permissions-to-managed-identity-using-bicep-graph-extension/A while back I published a blog post on how you can add Microsoft Graph application role permissions to a Managed Identity, something that is useful if you have deployed Azure services that use managed identities, and need permission to access Graph API. https://gotoguy.blog/ 2022 /03/15/add-graph-application-permissions-to-managed-identity-using-graph-explorer/ The above blog post is currently the only “graphical” or UI based way that you can assign those permissions today, most people use Microsoft Graph SDK PowerShell for this.https://gotoguy.blog/2023/09/15/connect-to-microsoft-graph-in-azure-devops-pipelines-using-workload-identity-federation/Fri, 15 Sep 2023 12:31:36 +0000Jan Vidar Elvenhttps://gotoguy.blog/2023/09/15/connect-to-microsoft-graph-in-azure-devops-pipelines-using-workload-identity-federation/Microsoft recently announced that Workload Identity Federation for Azure Pipelines now is in Public Preview: https://devblogs.microsoft.com/devops/public-preview-of-workload-identity-federation-for-azure-pipelines/ . This opens for a lot of scenarios for Azure service connections, without the need to manage secrets for service principals and more security as there are no secrets that can be exposed or exfiltrated. As I work a lot with Microsoft Graph and automation, I wanted to see if and how I could use Workload Identity Federation to connect to and send queries to Microsoft Graph using Azure Pipelines.