Recorded 23 Oct 2026 at 19:55 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Microsoft Entra roleMicrosoft Learn
Application Developer
Can create application registrations independent of the 'Users can register applications' setting and update applications they own.
What it said
- Permission coverage
- Documented resource actions
- Action: microsoft.directory/applications/appRoles/update
- Update the appRoles property on all types of applications
- Action: microsoft.directory/applications/audience/update
- Update the audience property for applications
- Action: microsoft.directory/applications/authentication/update
- Update authentication on all types of applications
- Action: microsoft.directory/applications/basic/update
- Update basic properties for applications
- Action: microsoft.directory/applications/createAsOwner
- Create all types of applications, and creator is added as the first owner
- Action: microsoft.directory/applications/credentials/update
- Update application credentials
- Action: microsoft.directory/applications/delete
- Delete all types of applications
- Action: microsoft.directory/applications/disablement/update
- Update whether an application is enabled for users to sign in
- Action: microsoft.directory/applications/extensionProperties/update
- Update extension properties on applications
- Action: microsoft.directory/applications/notes/update
- Update notes of applications
- Action: microsoft.directory/applications/owners/update
- Update owners of applications
- Action: microsoft.directory/applications/permissions/update
- Update exposed permissions and required permissions on all types of applications
- Action: microsoft.directory/applications/policies/update
- Update policies of applications
- Action: microsoft.directory/applications/tag/update
- Update tags of applications
- Action: microsoft.directory/applications/verification/update
- Update application's verification property
- Action: microsoft.directory/deletedItems.applications/delete
- Permanently delete applications, which can no longer be restored
- Action: microsoft.directory/oAuth2PermissionGrants/createAsOwner
- Create OAuth 2.0 permission grants, with creator as the first owner
- Action: microsoft.directory/servicePrincipals/createAsOwner
- Create service principals, with creator as the first owner