azure-ad-powershell-v2

Getting blank while fetching Delegated permissions of Service Principal via PowerShell

I am trying to get the list of delegated permissions that I granted to Service principal by querying via PowerShell like below:

Get-AzureADOAuth2PermissionGrant | Where-Object { $_.ClientId -eq  'myappclientid' } | Select-Object -Property *

But I am getting blank in response.

I can see the Service principal permissions in my Azure Portal. But still, I'm facing the same error.

Can anyone help me out with what am I missing here?

I'm giving ObjectID of my application registered in Azure AD like this:

enter image description here

Solution

  • Please note that when you are registering application in Azure AD it automatically creates a Service Principal under Enterprise Applications with same name but with different object_id

    Make sure to pass that object_id of your Enterprise application not your registered application like below:

    Go to Azure Portal -> Azure Active Directory -> Enterprise Applications -> Your Application -> Overview

    enter image description here

    I tried to reproduce the same in my environment and got the below results:

    When I passed object_id of registered application in the query like below I got the same response like below:

    enter image description here

    When I passed the object_id of Enterprise application, I got the delegated permissions successfully like below:

    enter image description here

    References:

    Apps & service principals in Azure AD - Microsoft Entra | Microsoft Docs

    azure - How to list Service principal permissions using powershell - Stack Overflow by fabrisodotps1