Azure - Register an Application

Change Summary

Overview

Registering an application on Azure Active Directory is the process of securely creating, configuring, managing, and monitoring applications in the cloud. When you register an application, you configure secure user access.

This document explains the steps to register a TechnoMile application on Azure Active Directory.

Audience

• Microsoft Dynamics Administrators

• IT Support

Prerequisites

• You must have access to the Azure portal with the required Administrator permissions.

• Ensure that TechnoMile's Contracts Suite is already installed and configured. The version of this package must be 2026.1 or higher.

Register an Application on Azure Active Directory

1. Go to Azure Active Directory using the following URL: https://portal.azure.com/.

2. Click Microsoft Entra ID.

   Important:
   Azure Active Directory is now Microsoft Entra ID.

   

3. Expand Manage, click App registrations, and then click New registration.
   

4. Enter a Name such as TM CI App.

   Important:

   In this document, the example application Name is entered as TM CI App. However, you can perform these steps for any TechnoMile application.

5. Choose Supported account types as Single tenant only -TechnoMile - Demo Tenant.
   

6. Select Redirect URI as Web and click Register.
   
   Application is registered.
   

Configure Certificates & Secrets

1. Go to Certificates & secrets and click New client secret.
   

2. Enter field details such as Description and Expires, and click Add.

   Notes:

   • While adding client secret details, the Expires field has multiple options such as 3 months, 12 months, Custom, etc. Here, you can select any option, as per your requirements.

   • After selecting the Custom option, the Start and End fields become visible, which must also be specified.

   
   Client secret details are added.

3. Copy Value that is present next to the Expires field.

   Important:

   The data contained within the Value field is visible only once and is the same as the Client Secret that you require.

   

4. Paste the copied Value as Client Secret into an external application such as Notepad.

Configure API Permissions

1. Go to API permissions and click Add a permission.
   
   A popup window opens the Microsoft APIs tab by default.

2. Click Dynamics CRM.
   

3. Select user_impersonation and click Add permissions.
   

4. Click Add a permission again.
   

5. Click Microsoft Graph.
   

6. Click Application permissions, search for sites, expand Sites, and select Sites.Selected.

   Note:

   Assigning only the Sites.Selected permission is not sufficient for granting SharePoint access to an SPN or Application User. You must also add the required Admin permissions using the SharePoint Admin portal.

   

7. Search for user.read, expand User, select User.Read.All, and click Add permissions.
   

8. Click Add a permission again.
   

9. Scroll down and click Power Automate.
   

10. Click Delegated permissions, search for approvals, expand Approvals, select Approvals.Manage.All and Approvals.Read.All, and click Add permissions.
    

    Important:

    The following steps related to configuring API Permissions for Azure Key Vault are to be performed only if you have already enabled Key Vault on your instance/solution. Else, this API Permission will not be visible.

11. Click Add a permission again.
    

12. Scroll down and click Azure Key Vault, only if you have chosen to store Secrets in the Azure Key Vault.
    

13. Under Permissions, select user_impersonation and click Add permissions.
    

14. Click Grant admin consent for….
    
    A confirmation message displays.

15. Click Yes.
    
    All API permissions are configured with admin consent.
    

Create Application User

1. Go back to Azure using the following URL: https://portal.azure.com/.

   Important:

   Azure Active Directory is now Microsoft Entra ID.

2. Search for and click your Application in search results.

   Important:

   Ensure that you search for the same Application that you had previously created.

   

3. Go to Overview and copy Application ID.
   

4. Go to Power Platform Admin Center using the following URL: https://admin.powerplatform.microsoft.com/home.

5. Go to Manage, then go to Environments, and click to open an Environment of your choice.
   

6. Under Users, click See all.
   

7. Click app users list.
   

8. Click New app user.
   

9. Click Add an app.
   

10. Paste the previously copied Application ID in the search bar, select TM CI App, and click Add.
    
    Application is added.

11. Enter Business unit as per your Environment and click the pencil icon in the Security roles field.
    

12. Select Security roles such as System Administrator and click Save.
    
    A confirmation message displays.

13. Click Save again.
    

14. Click Create.
    
    Application User is created.