Azure AD App Registration & Service Principal Registration & API Permissions (ResourceAccess)

AppRegistration.ps1

# Connect-AzureAD
# Login-AzAccount


$env = "Acc"
$clientAppName = "SPN-Inventory-$($env)-AutomatedTestClient"
$serverAppName = "SPN-Inventory-$($env)-App"
$ownerAppName = "spn-inventory-api"

$newApp = New-AzADApplication -DisplayName $clientAppName
New-AzADServicePrincipal -ApplicationId $newApp.ApplicationId
Add-AzureADApplicationOwner -ObjectId $newApp.ObjectId -RefObjectId (Get-AzADServicePrincipal -DisplayName $ownerAppName).Id

$requiredResource = Get-AzureADApplication -SearchString $serverAppName

#Initialize RequiredResourceAccess
$requiredResourceAccess = New-Object Microsoft.Open.AzureAD.Model.RequiredResourceAccess
$requiredResourceAccess.ResourceAppId = $requiredResource.AppId
$requiredResourceAccess.ResourceAccess = New-Object System.Collections.Generic.List[Microsoft.Open.AzureAD.Model.ResourceAccess]

$resourceAccess = New-Object Microsoft.Open.AzureAD.Model.ResourceAccess
$resourceAccess.Type = "Scope"
$resourceAccess.Id = $requiredResource.oauth2Permissions.id

#Add required permission
$requiredResourceAccess.ResourceAccess.Add($resourceAccess)
Set-AzureADApplication -ObjectId $newApp.ObjectId -RequiredResourceAccess $requiredResourceAccess