Skip to content

CORE by Simova GmbH – App Registration

The CORE by Simova GmbH App Registration is a corporate application that is hosted in our tenant. It can be approved by administrators of your organization. This app registration has only delegated permissions, which means that the app itself cannot change data in your tenant – it can only do so on behalf of a person who has the appropriate permissions.

The app registration is used to create and retrieve app registrations for individual tenants in your Entra AD tenant, to assign Azure management rights to specific service principals, and to manage user groups.

Permissions

  • Azure Service Management

  • user_impersonation – Used to assign permissions to created service principals for specific Azure resources. These are used to create specific Azure resources such as Azure Storage Accounts, Azure Web Services, Azure Search Services, etc.

  • Microsoft Graph

  • Directory.ReadWrite.All – Used to create and read users and user groups. However, the app cannot delete users or groups or reset user passwords.
  • User.EnableDisableAccount.All – Allows the app to enable or disable user accounts on behalf of the signed-in user.
  • User.Read – Signs you in and reads your profile, used for the delegated permission flow.
  • User.ReadWrite.All – Allows the app to read and edit the complete profile, reports, and managers of other users in your organization on behalf of the signed-in user.
  • Application.ReadWrite.All – Used to automatically create app registrations in your tenant.