Microsoft Entra ID X vs Y
Identity, sign-in, Conditional Access and app registrations in Microsoft 365 and Azure.All Microsoft Entra ID pages
- App registration vs enterprise application in Microsoft Entra ID (application object vs service principal)An app registration is the application object, defined once in its home tenant; an enterprise application is its service principal in each tenant that uses it.
- Microsoft Graph permission vs Microsoft Entra role: delegated scopes, app roles and admin rolesA Graph permission says what an app may call; an Entra role says what a user or service principal may do. Delegated access needs both; app-only needs app roles.