az ad app credential
Manage an application's password or certificate credentials.
Commands
az ad app credential delete |
Delete an application's password or certificate credentials. |
az ad app credential list |
List an application's password or certificate credentials. |
az ad app credential reset |
Append or overwrite an application's password or certificate credentials. |
az ad app credential delete
Delete an application's password or certificate credentials.
az ad app credential delete --id
--key-id
[--cert]
Examples
delete an application's password or certificate credentials (autogenerated)
az ad app credential delete --id 00000000-0000-0000-0000-000000000000 --key-id xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
Required Parameters
Identifier uri, application id, or object id.
Credential key id.
Optional Parameters
A certificate based credential.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az ad app credential list
List an application's password or certificate credentials.
az ad app credential list --id
[--cert]
[--query-examples]
Examples
list an application's password or certificate credentials (autogenerated)
az ad app credential list --id 00000000-0000-0000-0000-000000000000
Required Parameters
Identifier uri, application id, or object id.
Optional Parameters
A certificate based credential.
Recommend JMESPath string for you. You can copy one of the query and paste it after --query parameter within double quotation marks to see the results. You can add one or more positional keywords so that we can give suggestions based on these key words.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az ad app credential reset
Append or overwrite an application's password or certificate credentials.
The output includes credentials that you must protect. Be sure that you do not include these credentials in your code or check the credentials into your source control. As an alternative, consider using [managed identities](https://aka.ms/azadsp-managed-identities) if available to avoid the need to use credentials.
az ad app credential reset --id
[--append]
[--cert]
[--create-cert]
[--credential-description]
[--end-date]
[--keyvault]
[--password]
[--years]
Examples
Append a certificate to the application with the certificate string.
az ad app credential reset --id 00000000-0000-0000-0000-000000000000 --cert "MIICoT..." --append
Append a certificate to the application with the certificate file.
az ad app credential reset --id 00000000-0000-0000-0000-000000000000 --cert "@~/cert.pem" --append
cert.pem contains the following content
-----BEGIN CERTIFICATE----- <<< this line is optional
MIICoT...
-----END CERTIFICATE----- <<< this line is optional
append or overwrite an application's password or certificate credentials (autogenerated)
az ad app credential reset --id 00000000-0000-0000-0000-000000000000
Required Parameters
Identifier uri, application id, or object id.
Optional Parameters
Append the new credential instead of overwriting.
Certificate to use for credentials.
Create a self-signed certificate to use for the credential.
The description of the password.
Date or datetime after which credentials expire(e.g. '2017-12-31T11:59:59+00:00' or '2017-12-31'). Default value is one year after current time.
Name or ID of a KeyVault to use for creating or retrieving certificates.
App password, aka 'client secret'.
Number of years for which the credentials will be valid.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.