Microsoft Entra role allowing its holders to register apps even if "Users can register applications" is No. Other people's apps are outside its control.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Application Developer in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra
The umbrella brand covering Microsoft's identity and network access portfolio. Internet Access, Private Access, External ID and ID Governance all belong to it, built on top of the core directory service, Entra ID.
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- Users can register applications
A tenant-wide setting found at Entra ID > Users > User settings. When it is No, app registration (and so service principal creation) is limited to admins and roles like Application Developer.
- CONTROL
Granting this on a securable gives all other permissions on it too, making it the most powerful SQL permission. At database scope that includes UNMASK and ALTER ANY MASK. Warehouse access through the Admin, Member or Contributor workspace roles carries it.