Skip to content

Commit

Permalink
Update service principal warning (Azure#14064)
Browse files Browse the repository at this point in the history
  • Loading branch information
rolyon authored Feb 1, 2021
1 parent 8d0a01a commit b52f042
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/Resources/Resources/help/New-AzADServicePrincipal.md
Original file line number Diff line number Diff line change
Expand Up @@ -131,7 +131,7 @@ properties if an ApplicationId is not provided. To update the application-specif
the [Update-AzADApplication](./update-azadapplication.md) cmdlet.

> [!WARNING]
> When you create a service principal using the **New-AzADServicePrincipal** command, the output includes credentials that you must protect. Be sure that you do not include these credentials in your code or check the credentials into your source control. As an alternative, consider using [managed identities](/azure/active-directory/managed-identities-azure-resources/overview) to avoid the need to use credentials.
> When you create a service principal using the **New-AzADServicePrincipal** command, the output includes credentials that you must protect. As an alternative, consider using [managed identities](/azure/active-directory/managed-identities-azure-resources/overview) to avoid the need to use credentials.
>
> By default, **New-AzADServicePrincipal** assigns the [Contributor](/azure/role-based-access-control/built-in-roles#contributor) role to the service principal at the subscription scope. To reduce your risk of a compromised service principal, assign a more specific role and narrow the scope to a resource or resource group. See [Steps to add a role assignment](/azure/role-based-access-control/role-assignments-steps) for more information.
Expand Down

0 comments on commit b52f042

Please sign in to comment.