Tag: app-registrations

All the articles with the tag "app-registrations".

• Restricted Management AUs in Entra ID: two undocumented paths that actually work

  19 May, 2026

  Restricted Management Administrative Units contain a service principal holding Application.ReadWrite.All — but the design depends on three configurations Microsoft does not document. All three tested against a live tenant with az rest.