Custom Azure AD Role or Azure Policy to allow only Microsoft Graph User.Read.All permission to Azure Service Prinicpal
Use Case - Automate assigning Microsoft Graphs's User.Read.All permission to App Registration/Service Principal using DevOps pipeline. So that applications can read user profiles. Challenge To grant Microsoft Graphs's User.Read.All permission, service principal under which pipeline will run, requires Global Administrator…