Service principals for applications in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a service principal in Azure?

A service principal is like a user identity for an application. It allows the app to access Azure resources securely without using a real person's login.

beginner

Why use a service principal instead of a user account for app access?

Service principals provide controlled, limited access to resources. They avoid using personal user credentials, improving security and automation.

intermediate

How do you create a service principal in Azure?

You create a service principal by registering an application in Azure Active Directory and then creating a service principal for it. This can be done via Azure Portal, CLI, or PowerShell.

intermediate

What information do you need to authenticate an application using a service principal?

You need the service principal's Application (client) ID, Tenant ID, and a secret (password) or certificate to authenticate.

intermediate

How can you limit the permissions of a service principal?

Assign only the necessary roles and scopes to the service principal using Azure Role-Based Access Control (RBAC). This follows the principle of least privilege.

What does a service principal represent in Azure?

A An identity for an application

B A user account for a person

C A virtual machine

D A storage account

A service principal is an identity created for an application to access Azure resources securely.

Which of these is NOT needed to authenticate with a service principal?

A Client ID

B Tenant ID

C Client secret or certificate

D User password

User passwords are not used; authentication uses client ID, tenant ID, and secret or certificate.

How do you restrict what a service principal can do?

A By changing the user password

B By deleting it

C By assigning roles with limited permissions

D By moving it to another subscription

Assigning roles with limited permissions controls what the service principal can access.

Which tool can you use to create a service principal?

A Microsoft Word

B Azure CLI

C Windows Explorer

D Excel

Azure CLI is a command-line tool to create and manage service principals.

Why is using a service principal better than using a user account for app access?

A It improves security and automation

B It requires a password change every day

C It costs more

D It uses less memory

Service principals improve security by avoiding personal credentials and support automation.

Explain what a service principal is and why it is important for applications in Azure.

Think about how apps need their own login to access cloud resources safely.

Describe the steps and information needed to create and use a service principal for an application.

Consider the process from app registration to permission assignment.