Service Principal guides
The instance of an application inside a specific Entra ID tenant, with its own permissions and identity. See the glossary entry →
6 guides touch on service principal.
- Cleaning up over-consented app permissions
How to find apps holding more Graph permission than they use — delegated and application grants, who consented, what is called — and reduce them safely.
- Cleaning up unused enterprise apps in Entra ID
How to find unused service principals in Entra ID — sign-in activity, credentials, assignments — remove them without breaking year-end integrations.
- Entra ID app registrations and enterprise apps
Two sides of the same coin — app registrations define an app, enterprise apps grant it to your tenant. Here's how they relate.
- Entra ID Workload Identities
Workload Identities is Entra ID's product for managing non-human identities — apps, services, scripts — and the risks they create.
- Microsoft 365 service principal best practices
How to design, deploy, and operate service principals safely — credentials, permissions, and lifecycle.
- Rotating an app registration secret without downtime
How to rotate an Entra app registration secret or certificate with zero outage: find every consumer, add the new credential alongside the old, switch, remove.