Ownership/app role assignments for SPN created in Corp tenant

Austin Hobbs 26 Reputation points Microsoft Employee
2026-05-28T16:58:31.44+00:00

I had a SPN created in the CORP tenant; however, I do not have permissions to alter the app role assignments.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

Answer accepted by question author
Sridevi Machavarapu 33,820 Reputation points Microsoft External Staff Moderator
2026-05-28T17:02:31.1166667+00:00

Hello Austin Hobbs,

As discussed offline, the issue occurred because ownership of the App Registration in the PME tenant does not automatically grant permission to manage the corresponding Enterprise Application or app role assignments in the CORP tenant.

To resolve the issue, you need to work with the appropriate tenant administrators. A user with the Application Administrator or Global Administrator role can add you as an owner of the Enterprise Application or grant the required permissions needed to manage the application and its app role assignments. Once the necessary access is assigned, you will be able to perform the required administrative actions.

Was this answer helpful?

1 person found this answer helpful.
0 comments No comments

0 additional answers

Sort by: Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.