Skip to main content

aad sp get

Gets information about the specific service principal

Usage​

m365 aad sp get [options]

Options​

-i, --appId [appId]

ID of the application for which the service principal should be retrieved

-n, --appDisplayName [appDisplayName]

Display name of the application for which the service principal should be retrieved

--appObjectId [appObjectId]

ObjectId of the application for which the service principal should be retrieved

-h, --help [help]

Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are options, examples, remarks, response, full. Default is options.

--query [query]

JMESPath query string. See http://jmespath.org/ for more information and examples.

-o, --output [output]

Output type. json, text, csv, md, none. Default json.

--verbose

Runs command with verbose logging.

--debug

Runs command with debug logging.

Remarks​

Specify either the appId, appObjectId or appDisplayName. If you specify more than one option value, the command will fail with an error.

Examples​

Return details about the service principal with appId b2307a39-e878-458b-bc90-03bc578531d6.

m365 aad sp get --appId b2307a39-e878-458b-bc90-03bc578531d6

Return details about the Microsoft Graph service principal.

m365 aad sp get --appDisplayName "Microsoft Graph"

Return details about the service principal with ObjectId b2307a39-e878-458b-bc90-03bc578531dd.

m365 aad sp get --appObjectId b2307a39-e878-458b-bc90-03bc578531dd

Response​

{
  "id": "b62fe6f3-5746-49be-af60-eaa24d66754a",
  "deletedDateTime": null,
  "accountEnabled": true,
  "alternativeNames": [],
  "appDisplayName": "LinkedIn",
  "appDescription": null,
  "appId": "ac7c9b4b-83b0-4a5e-ace2-a3530162c8f8",
  "applicationTemplateId": null,
  "appOwnerOrganizationId": "c2b2a0f7-fa44-4929-a994-757b7b998f01",
  "appRoleAssignmentRequired": true,
  "createdDateTime": "2022-12-12T15:41:42Z",
  "description": null,
  "disabledByMicrosoftStatus": null,
  "displayName": "LinkedIn",
  "homepage": "https://account.activedirectory.windowsazure.com:444/applications/default.aspx?metadata=linkedin|ISV9.3|primary|z",
  "loginUrl": null,
  "logoutUrl": null,
  "notes": null,
  "notificationEmailAddresses": [],
  "preferredSingleSignOnMode": null,
  "preferredTokenSigningKeyThumbprint": null,
  "replyUrls": [],
  "servicePrincipalNames": [
    "ac7c9b4b-83b0-4a5e-ace2-a3530162c8f8",
    "http://LinkedIn/41859ae8-d0c4-45ac-9394-00000464c196"
  ],
  "servicePrincipalType": "Application",
  "signInAudience": "AzureADMyOrg",
  "tags": [
    "4d57f64e-9941-4df2-bb70-8d9a2a38ab91",
    "WindowsAzureActiveDirectoryGalleryApplicationPrimaryV1",
    "WindowsAzureActiveDirectoryIntegratedApp"
  ],
  "tokenEncryptionKeyId": null,
  "samlSingleSignOnSettings": null,
  "addIns": [],
  "appRoles": [
    {
      "allowedMemberTypes": [
        "User"
      ],
      "description": "msiam_access",
      "displayName": "msiam_access",
      "id": "01c2bb8e-0895-42c8-b950-3ec8abc7a012",
      "isEnabled": true,
      "origin": "Application",
      "value": null
    }
  ],
  "info": {
    "logoUrl": null,
    "marketingUrl": null,
    "privacyStatementUrl": null,
    "supportUrl": null,
    "termsOfServiceUrl": null
  },
  "keyCredentials": [],
  "oauth2PermissionScopes": [
    {
      "adminConsentDescription": "Allow the application to access LinkedIn on behalf of the signed-in user.",
      "adminConsentDisplayName": "Access LinkedIn",
      "id": "823b3b27-be2a-4699-a0ae-da054e6465cf",
      "isEnabled": true,
      "type": "User",
      "userConsentDescription": "Allow the application to access LinkedIn on your behalf.",
      "userConsentDisplayName": "Access LinkedIn",
      "value": "user_impersonation"
    }
  ],
  "passwordCredentials": [],
  "resourceSpecificApplicationPermissions": [],
  "verifiedPublisher": {
    "displayName": null,
    "verifiedPublisherId": null,
    "addedDateTime": null
  }
}

More information​

CTRL + M