Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions docs/identity/enterprise-apps/overview-assign-app-owners.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,9 @@ As an owner of an enterprise application in Microsoft Entra ID, a user can manag
> [!NOTE]
> The application may have more permissions than the owner, and thus would be an elevation of privilege over what the owner has access to as a user. An application owner can create or update users or other objects while impersonating the application. The elevation of privilege to owners can raise a security concern in some cases depending on the application's permissions.
> [!NOTE]
> Currently due to background applications and service principals objects settings dependencies, the application owners added by other than Entra admin center means (Graph API, PowerShell), will not be able to manage some enterprise applications settings like attributes and claims, modify configured SAML certificates properties or token encryption settings, etc.
Copy link

Copilot AI Dec 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The sentence is overly long and complex, making it difficult to read. Consider breaking it into two sentences or restructuring for better clarity. For example: "Currently, due to background applications and service principals object settings dependencies, application owners added by means other than the Entra admin center (such as Graph API or PowerShell) have limited management capabilities. They will not be able to manage certain enterprise application settings, such as attributes and claims, SAML certificate properties, or token encryption settings."

Suggested change
> Currently due to background applications and service principals objects settings dependencies, the application owners added by other than Entra admin center means (Graph API, PowerShell), will not be able to manage some enterprise applications settings like attributes and claims, modify configured SAML certificates properties or token encryption settings, etc.
> Currently, due to dependencies related to background applications and service principal object settings, application owners who are added by means other than the Entra admin center (such as Graph API or PowerShell) have limited management capabilities. They will not be able to manage certain enterprise application settings, such as attributes and claims, SAML certificate properties, or token encryption settings.

Copilot uses AI. Check for mistakes.
## FAQ

**What do you do with applications where the owner is no longer with the organization?**
Expand Down