az ad app credential

Manage an application's password or certificate credentials.

Commands

az ad app credential delete

Delete an application's password or certificate credentials.
az ad app credential list

List an application's password or certificate credentials.
az ad app credential reset

Append or overwrite an application's password or certificate credentials.

az ad app credential delete

Edit

Delete an application's password or certificate credentials.

az ad app credential delete --id
                            --key-id
                            [--cert]

Examples

delete an application's password or certificate credentials (autogenerated)

az ad app credential delete --id 00000000-0000-0000-0000-000000000000 --key-id xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Required Parameters

--id

Identifier uri, application id, or object id.

--key-id

Credential key id.

Optional Parameters

--cert

A certificate based credential.

az ad app credential list

Edit

List an application's password or certificate credentials.

az ad app credential list --id
                          [--cert]
                          [--query-examples]

Examples

list an application's password or certificate credentials (autogenerated)

az ad app credential list --id 00000000-0000-0000-0000-000000000000

Required Parameters

--id

Identifier uri, application id, or object id.

Optional Parameters

--cert

A certificate based credential.

--query-examples

Recommend JMESPath string for you. You can copy one of the query and paste it after --query parameter within double quotation marks to see the results. You can add one or more positional keywords so that we can give suggestions based on these key words.

az ad app credential reset

Edit

Append or overwrite an application's password or certificate credentials.

The output includes credentials that you must protect. Be sure that you do not include these credentials in your code or check the credentials into your source control. As an alternative, consider using [managed identities](https://aka.ms/azadsp-managed-identities) if available to avoid the need to use credentials.

az ad app credential reset --id
                           [--append]
                           [--cert]
                           [--create-cert]
                           [--credential-description]
                           [--end-date]
                           [--keyvault]
                           [--password]
                           [--years]

Examples

Append a certificate to the application with the certificate string.

az ad app credential reset --id 00000000-0000-0000-0000-000000000000 --cert "MIICoT..." --append

Append a certificate to the application with the certificate file.

az ad app credential reset --id 00000000-0000-0000-0000-000000000000 --cert "@~/cert.pem" --append
cert.pem contains the following content
-----BEGIN CERTIFICATE-----  <<< this line is optional
MIICoT...
-----END CERTIFICATE-----    <<< this line is optional

append or overwrite an application's password or certificate credentials (autogenerated)

az ad app credential reset --id 00000000-0000-0000-0000-000000000000

Required Parameters

--id

Identifier uri, application id, or object id.

Optional Parameters

--append

Append the new credential instead of overwriting.

--cert

Certificate to use for credentials.

--create-cert

Create a self-signed certificate to use for the credential.

--credential-description

The description of the password.

--end-date

Date or datetime after which credentials expire(e.g. '2017-12-31T11:59:59+00:00' or '2017-12-31'). Default value is one year after current time.

--keyvault

Name or ID of a KeyVault to use for creating or retrieving certificates.

--password -p

App password, aka 'client secret'.

--years

Number of years for which the credentials will be valid.