Marius Solbakken Mellum

You can try to deploy the SOC Process Framework Sentinel workbook from https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Workbooks/SOCProcessFramework.json - I have found no way to do this using Bicep, because of this limitation. The same...

As a managed service provider, we have very good control over service principals and key rollover, so we have no concerns at all with it. Being added as a guest...

The multi tenant app registration has the secret/certificate and is what is used to sign into the customer tenant after being consented to. That's how multi tenant app registrations work...

No, the app does not know that unfortunately. Without deep testing I believe so yes, because one needs to provide the tenantid when running. I have not tested to well...

Yeah, this was not fun to work with. Here is my workaround: https://goodworkaround.com/2024/10/07/working-around-custom-security-attribute-limitations-in-net-graph-sdk/

We have the same issue. Investigating whether there is a behind the scenes attribute somewhere. Very annoying as we create 100s of pipelines using TF.