Azuread_application as Service Principal

Terraform Providers
1

I’m trying to use “azuread_application” to create a service principal, and the user I’m authenticating as is another service principal. The documentation here: https://www.terraform.io/docs/providers/azuread/d/application.html

Indicates: " NOTE: If you’re authenticating using a Service Principal then it must have permissions to both Read and write all (or owned by) applications and Sign in and read user profile within the Windows Azure Active Directory API."

I cannot find the “Sign in and read user profile” permission. Is this documentation out of date?

thanks,
Ed

2

was looking at same thing today, we’ve added the legacy “Azure Active Directory Graph” permissions and more current “Microsoft Graph” ones below, believe the “Sign in and read user profile” one you mention relates to “Directory.Read.All”

Microsoft Graph
	Application.Read.All
	Application.ReadWrite.All
	Application.ReadWrite.OwnedBy
	User.Read
	
Azure Active Directory Graph 
	Application.ReadWrite.All
	Application.ReadWrite.OwnedBy
	Directory.Read.All