Clicky

Microsoft Technical Bulletins

The latest updates for all the Microsoft Products you use every day.

Microsoft Identity Service Curtain Reveal Tech Bulletin Header

Written by Richard Quatier

My goal is to help your business by integrating processes that automate mundane tasks and simplify complex ones without breaking budgets.

March 22, 2022

Blog Home

Identity Service: Upcoming feature to recover accidentally deleted service principal objects

Identity Service, Microsoft Graph, SharePoint Development Services

From Microsoft Corporation
Technical Bulletin MC344406 · Published Mar 18, 2022

Message Summary

Microsoft Graph API will soon start supporting the ability to recover accidentally deleted service principal objects. The application object already supports this ability. The update will make the recovery story better for managing the life cycle of applications in your tenant.
When this will happen:We expect to begin rolling out in early April and expect to complete rollout by late May.
How this will affect your organization:You should be aware of this upcoming release and assess how this may affect your existing scripts and workflows. Expect the following changes to occur after this update:

  • Anytime you delete a service principal through any of the following supported experiences, it will be soft-deleted and hence can be recovered.
  • Soft-deleted service principal objects go into the deleted items container and remain available to restore for up to 30 days. After 30 days, they’re permanently deleted, and this frees up the quota.
  • Soft-deleted service principals can be listed using the List deleted items method for Microsoft Graph API or using Get-AzureADMSDeletedDirectoryObject PowerShell cmdlet.
  • Soft deleted service principals can be permanently deleted using the Permanently delete item method for Microsoft Graph API or Remove-AzureADMSDeletedDirectoryObject PowerShell cmdlet.

Note: A non-admin user can create no more than 250 Azure AD resources that include applications and service principals. Both active resources and deleted resources that are available to restore count toward this quota.
The quota limit already stated is applicable when creating applications or service principals using a delegated flow such as using Azure AD app registrations or Enterprise apps portal. Interacting with the Microsoft Graph API programmatically using application flow won’t have this restriction.
What you need to do to prepare:Notify your users about this change and update your training and documentation as appropriate. If you have any clean-up scripts that permanently delete applications that free up the quota, update such scripts to include service principals as well.
For users who repeatedly exceed the quota in the course of their regular duties, they can permanently delete the resources they no longer need by using the information provided in the previous sections.
Learn more:

TECHNICAL BULLETIN END

QuixTec provides this and other technical bulletins unaltered from Microsoft. As an authorized Microsoft Partner, we ensure that all our solutions we deliver to you include the latest Microsoft updates.

ABOUT US: QuixTec, LLC is a U.S. certified Veteran Owned, modern DevOps organization with experience in a plethora of IT Software Languages.  As a Microsoft Partner, we specialize in Discounted Microsoft Software Licensing, Microsoft SharePoint, Microsoft365 and HTML5 technologies for small to enterprise-sized organizations. Our dedication to IT excellence is evidenced through our PECB ISO Certification training center. The only PECB ISO authorized center in Washington State. QuixTec, implements and provides training for upcoming open-source digital marketing services that are taking the industry by storm. This solution, used by over 100,000 businesses, provides enterprise level marketing capabilities at startup rates. The founder, Richard, has 30 years of experience working with several notable companies that include World Vision, Expedia, Microsoft, Levi Strauss, NASA, Boeing Aerospace, Los Alamos National Laboratory, and the U.S. Air Force, to name a few.  QuixTec is in the Seattle area. Phone today for a free consultation and project estimate.

(425) 367-9025

LEARN MORE

SharePoint Development ServicesSharePoint Development - Custom Software Development - Microsoft 365 Experts - Microsoft 365 - IT Staffing Services - IT Staffing - WordPress Development Services - Form Email Validation - Microsoft Licensing - Mautic Open Source MarketingBest IT Staffing AgenciesIT Staffing Company  - PECB ISO Training and Certification

You May Also Like…

Azure Active Directory: Temporary Access Pass

Azure Active Directory: Temporary Access Pass

Identity Service, SharePoint Development Services From Microsoft CorporationTechnical Bulletin MC395603 · Published Jun 30, 2022 Message Summary Temporary Access Pass (TAP) is now generally available. TAP can be used to securely register...

(Updated) Emails Related to AAD Groups are Changing Format

(Updated) Emails Related to AAD Groups are Changing Format

Microsoft 365 Experts, Identity Service From Microsoft CorporationTechnical Bulletin MC384327 · Published May 25, 2022 · Last updated May 26, 2022 Message Summary Updated May 26, 2022: We have updated the content below to show as...