How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Microsoft Entra ServicePrincipals API

Manage service principal objects that represent application instances in a tenant for authentication and authorization

Microsoft Entra ServicePrincipals API is one of 17 APIs that Microsoft Entra publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Service Principals. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, authentication docs, pricing, a getting-started guide, and an API reference.

This API exposes 7 operations across 3 paths, and defines 9 schemas. It is described by OpenAPI 3.2.0, at version v1.0.

Requests are made against 2 base URLs: https://graph.microsoft.com/v1.0, https://graph.microsoft.com/beta.

7 operations 3 paths 9 schemas 1 DELETE3 GET1 PATCH2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
v1.0
Base URL
https://graph.microsoft.com/v1.0
Authentication
OAuth 2.0
Terms of Service
Resource Areas
1

Authentication & Security 1

Microsoft Entra ServicePrincipals API declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (oauth2) using the authorizationCode and clientCredentials flows, exposing 13 scopes. By default, every request must be authenticated.

  • oauth2 — OAuth 2.0 authorization using Microsoft identity platform. Supports authorization code flow for delegated permissions and client credentials flow for applicati…

Paths & Operations 7

Across 3 paths, the API surfaces 7 operations — 1 DELETE, 3 GET, 1 PATCH, 2 POST. Each is listed below with its method, path, parameters, and response codes.

ServicePrincipals 7

Manage service principal objects that represent application instances in a tenant for authentication and authorization

GET
/servicePrincipals
Microsoft Entra List Service Principals
listServicePrincipals 8 params → 200401403
POST
/servicePrincipals
Microsoft Entra Create Service Principal
createServicePrincipal body → 201400401403
GET
/servicePrincipals/{servicePrincipal-id}
Microsoft Entra Get Service Principal
getServicePrincipal 3 params → 200401403404
PATCH
/servicePrincipals/{servicePrincipal-id}
Microsoft Entra Update Service Principal
updateServicePrincipal 1 param body → 204400401403404
DELETE
/servicePrincipals/{servicePrincipal-id}
Microsoft Entra Delete Service Principal
deleteServicePrincipal 1 param → 204401403404
GET
/servicePrincipals/{servicePrincipal-id}/appRoleAssignments
Microsoft Entra List App Role Assignments
listServicePrincipalAppRoleAssignments 3 params → 200401403404
POST
/servicePrincipals/{servicePrincipal-id}/appRoleAssignments
Microsoft Entra Grant App Role Assignment
grantServicePrincipalAppRoleAssignment 1 param body → 201400401403

Schemas 9

The contract defines 9 schemas that model the data the API accepts and returns. The most detailed are ServicePrincipal (20 properties), AppRoleAssignment (8 properties), PermissionScope (8 properties), KeyCredential (7 properties). Each schema is shown below with its type and property counts.

AppRoleAssignment
object
Represents an app role granted to a user, group, or service principal
8 properties
AppRole
object
Represents a role defined by an application that can be assigned to users, groups, or service principals
6 properties
ServicePrincipal
object
Represents an instance of an application in a tenant. The service principal is the local representation used for sign-in and access to resources. It inherits c…
20 properties
PasswordCredential
object
Represents a password credential (client secret) associated with an application or service principal
6 properties
ODataError
object
OData error response
1 property
PermissionScope
object
Defines an OAuth 2.0 delegated permission scope exposed by a web API application
8 properties
AppRoleAssignmentCollectionResponse
object
Paged collection of app role assignments
4 properties
KeyCredential
object
Contains a key credential (certificate) associated with an application or service principal
7 properties
ServicePrincipalCollectionResponse
object
Paged collection of service principal objects
4 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

microsoft-entra-serviceprincipals-api-openapi.yml Raw ↑

Other APIs Microsoft Entra publishes across the network.

Microsoft Entra ID Protection API
Microsoft Entra Conditional Access API
Microsoft Entra Privileged Identity Management API
Microsoft Entra Verified ID API
Microsoft Entra External ID API
Microsoft Entra ID Governance API
Microsoft Entra Application Management API
Microsoft Entra Authentication Methods API
Microsoft Entra Workload ID API
Microsoft Entra Provisioning API
Microsoft Entra Global Secure Access API
Microsoft Identity Platform API
Where this information came from

This is an independent, third-party profile of Microsoft Entra ServicePrincipals API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.