Managing access to an Entra ID App Registration

I need to manage access to an Entra ID App Registration that enables application access to a custom role in Exchange Online. This implementation would require managing secrets for the app registration to grant access.

Looking at the Azure secrets engine, I don’t see a use case for making it work with this requirement.

Does anyone have experience managing oauth secrets for an app registration in Entra ID with Vault?

Thank you.