-
Notifications
You must be signed in to change notification settings - Fork 839
Update overview-assign-app-owners.md #1842
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -25,6 +25,9 @@ As an owner of an enterprise application in Microsoft Entra ID, a user can manag | |||||
| > [!NOTE] | ||||||
| > The application may have more permissions than the owner, and thus would be an elevation of privilege over what the owner has access to as a user. An application owner can create or update users or other objects while impersonating the application. The elevation of privilege to owners can raise a security concern in some cases depending on the application's permissions. | ||||||
| > [!NOTE] | ||||||
| > Currently due to background applications and service principals objects settings dependencies, the application owners added by other than Entra admin center means (Graph API, PowerShell), will not be able to manage some enterprise applications settings like attributes and claims, modify configured SAML certificates properties or token encryption settings, etc. | ||||||
ShannonLeavitt marked this conversation as resolved.
Show resolved
Hide resolved
|
||||||
| > Currently due to background applications and service principals objects settings dependencies, the application owners added by other than Entra admin center means (Graph API, PowerShell), will not be able to manage some enterprise applications settings like attributes and claims, modify configured SAML certificates properties or token encryption settings, etc. | |
| > Currently, due to dependencies related to background applications and service principal object settings, application owners who are added by means other than the Entra admin center (such as Graph API or PowerShell) have limited management capabilities. They will not be able to manage certain enterprise application settings, such as attributes and claims, SAML certificate properties, or token encryption settings. |
Uh oh!
There was an error while loading. Please reload this page.