Azure AD permissions needed

Hi There, I am running a pipeline under a service principal and I try to add new owners to the Azure AD applications that I create through this SP. The latter as the following permissions granted: However I am not able to add new owners when I create a new application here is the steps that I follow:

#login using the service principal
$ az login --service-principal --user $app_id --password $app_secret --tenant $tenant_id

#creating new application
$ export created_app_id=$(az ad app create --display-name "sp-created-app2" --query appid -o tsv)

#Add new owner to my subscription
$ az ad app owner add --id $created_app_id --owner-object-id $my_azuread_user
Insufficient privileges to complete the operation.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 7af83ae6-8be6-c2a3-e994-d09b60ddc167
• Version Independent ID: 70f8a6b9-5cba-2e41-1046-423405782c4c
• Content: az ad app owner
• Content Source: src/azure-cli/azure/cli/command_modules/role/_help.py
• Service: active-directory
• GitHub Login: @rloutlaw
• Microsoft Alias: routlaw

[nishanperera]

Hi, @markthebault I am in the process of adding the permission. Found this article https://docs.microsoft.com/en-us/graph/api/application-post-owners?view=graph-rest-1.0&tabs=http seems like it is necessary @jiasli

[markthebault]

Hi Guys I managed to solve the issue, this is the permission that was missing:

You do only need the following permissions to do the use-case presented: Azure active directory graphs:

• Application.readWrite.OwnedBy – Application
• Directory.Read.All – Application