I'm trying to grant someone read-only access to App Registrations in Azure but I'm running into some issues. I have given the user the Directory Reader role, but they're still encountering an access denied message when trying to view the applications. Is there a specific role or setting I need to change to make this work?
1 Answer
You actually need to assign them the Application Reader role instead of the Directory Reader role. The Directory Reader won't give the necessary permissions to view app registrations.
That's strange; I can't seem to find the Application Reader role. Where should I look for it?