App Registrations
App registrations are the applications registered in the selected tenant, meaning the application objects the tenant itself owns. This is the definition of an application: its identifiers, sign-in audience, redirect URIs, requested permissions, and any secrets or certificates it holds. Applications consented to in the tenant but owned elsewhere appear under Enterprise Applications instead.
The table is read live from Microsoft Graph each time the page loads.
Table Details
The properties returned are for the Graph resource type application. For more information on the properties please see the Graph documentation.
Table Actions
View in CIPP
Opens the View App Registration page for the selected app registration.
View App Registration
Opens the selected app registration in the Microsoft Entra admin center, in a new tab.
View API Permissions
Opens the API permissions view for the selected app registration in the Microsoft Entra admin center, in a new tab.
Create Enterprise App Template (Multi-Tenant)
Creates a reusable Enterprise App template from the selected app registration, copying its permissions into an automatically created permission set. Run from a customer tenant, the app registration is first copied to the partner tenant as a multi-tenant app. An option is offered to overwrite an existing template of the same name. Only available for multi-tenant applications that were not created from a gallery template.
Create Manifest Template (Single-Tenant)
Captures the application manifest into a named template that can then be deployed to any tenant. Credentials, tenant-specific identifiers and the publisher domain are stripped before the template is saved. Only available for single-tenant applications that were not created from a gallery template.
Add Client Secret
Creates a new client secret on the selected app registration, with a description of your choosing and an expiry of 3, 6, 12 or 24 months or a custom date. The secret value is shown once when it is created, with a copy button.
Remove Password Credentials
Prompts you to choose which of the application's client secrets to remove, listed by name and expiry date, then removes only those selected. Only available where the application holds password credentials.
Remove Certificate Credentials
Prompts you to choose which of the application's certificate credentials to remove, listed by name and expiry date, then removes only those selected. Only available where the application holds certificate credentials.
Delete App Registration
Deletes the selected app registration(s). Anything authenticating as the application stops working immediately.
More Info
Opens the Extended Info flyout with the full details for the selected row.
The two template actions are mutually exclusive: which one a row offers depends on its sign-in audience, so any given application shows one or the other rather than both. Templates created either way are saved to templates and can be deployed from there.
Where the tenant enforces an application secret lifetime policy, the expiry you choose for a new client secret is shortened to fit and you are told so in the result. The secret value cannot be retrieved after the dialogue closes, so copy it before dismissing it. Add Client Secret is available in bulk, but a bulk run creates a separate secret on every selected application, so use it one application at a time when you need to keep the values.
Extended Info Flyout
Alongside the usual row details, the flyout for this table renders an Application Manifest preview of the selected app registration:
The display name and description, its sign-in audience, and its web redirect URIs.
The permissions the application requests, grouped by the API that publishes them. Each group shows a count of application and delegated permissions, and expanding it lists each one by name with the description published by that API.
These are the permissions the application asks for in its manifest, which is not the same as what has been consented to in a tenant. Granted consent is shown on the Permissions tab of ...
Feature Requests/Ideas
We value your feedback and ideas. Please raise any feature requests on GitHub.
Last updated
Was this helpful?