Create a detailed documentation on permissions for AAD/subscription about trainingdays HOT 3 OPEN

To my knowledge we need:

Subscription: Owner or Contributor + User Access Administrator
Active Directory: Azure Application Administrator Role

For Active Directory the Application Developer role might also be enough?

from trainingdays.

Is this also sufficient for the k8s stuff?

from trainingdays.

For day5 we need Application Administrator Role in AAD. This role is needed to consent OAuth2 Permissions. Application Developer role is only enough if users are allowed to grant consent to OAuth2 permissions. It is a setting that can be configured under AAD-> Enterprise Applications -> User settings.
There is also a setting under AAD -> App Registration -> User Settings to allow non Administrators to register applications. But we have to test that, if the configuration in User settings would be enough.

from trainingdays.