You need to use the Azure CLI to create a new application registration in Microsoft Entra ID, instantiate its service principal, and grant the service principal Contributor access to a resource group.
Which sequence of commands should you perform? To answer, move all the actions from the list of actions to the answer area and arrange them in the correct order.
- 1Run `az login` to authenticate the Azure CLI session.
- 2Run `az ad app create` to register the application in Microsoft Entra ID.
- 3Run `az ad sp create` to instantiate a service principal for the registered application.
- 4Run `az role assignment create` to assign the Contributor role to the service principal.
Answer
The correct sequence of actions is: First, run `az login` to authenticate. Second, run `az ad app create` to register the application. Third, run `az ad sp create` to create a service principal for the registered application. Fourth, run `az role assignment create` to assign the Contributor role to the service principal.
The correct sequence begins with authenticating via `az login`. Next, the application registration must be created using `az ad app create` to obtain the Application ID. Then, a service principal must be instantiated in the tenant via `az ad sp create` using that Application ID. Finally, role-based access control (RBAC) is configured by running `az role assignment create` to grant the service principal the Contributor role.
Step-by-Step Solution
Key Concept
An Application Registration creates the global definition of the application, while a Service Principal is the local representation (security principal) in a specific tenant that receives role assignments and permissions.
Estimated Time:1m 0s