# Application Role Azure AD

**URL:** <https://developer.sailpoint.com/discuss/t/application-role-azure-ad/15672>\
**Category:** SHF Discussion and Questions\
**Tags:** sailpoint-identity-security\
**Created:** [August 7, 2023, 7:38pm UTC](https://developer.sailpoint.com/discuss/t/application-role-azure-ad/15672 "2023-08-07T19:38:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![gsierra](https://avatars.discourse-cdn.com/v4/letter/g/d2c977/32.png) [@gsierra](https://developer.sailpoint.com/discuss/u/gsierra)\
**Post date:** [August 7, 2023, 7:38pm UTC](https://developer.sailpoint.com/discuss/t/application-role-azure-ad/15672/1 "2023-08-07T19:38:54Z")

</div>

Hello everyone!  
I have a problem with the Azure AD connector. The connector does not read the application roles that a user has associated.  
The entitlement is added correctly, however sailpoint does not make the relationship between the user and the permission. What’s going on?

---

<div class="post-metadata">

**Author:** ![zachm117](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/zachm117/32/3883_2.png) [@zachm117](https://developer.sailpoint.com/discuss/u/zachm117)\
**Post date:** [August 29, 2023, 1:01am UTC](https://developer.sailpoint.com/discuss/t/application-role-azure-ad/15672/2 "2023-08-29T01:01:54Z")

</div>

Hey Gimena!

Can you please provide some more detail on the issue you are experiencing?

Is the Application Roles schema defined in IDN? Documentation [here](https://documentation.sailpoint.com/connectors/microsoft/azure_ad/help/integrating_azure_active_directory/application_role.html?Highlight=%22Application%20Role%22)  
Are you using any filters on the Application Roles? Documentation [here](https://documentation.sailpoint.com/connectors/microsoft/azure_ad/help/integrating_azure_active_directory/aggregation_settings.html?Highlight=%22Application%20Role%22)  
Can you confirm you have given the service account the necessary permissions to aggregate this information? Documentation [here](https://documentation.sailpoint.com/connectors/microsoft/azure_ad/help/integrating_azure_active_directory/assigning_application_permissions.html)  
Are you trying to manage Application Roles for Service Principles? If so, you would need to enable [this](https://documentation.sailpoint.com/connectors/microsoft/azure_ad/help/integrating_azure_active_directory/manage_service_principals.html) setting.

Please let me know if any of these solutions work for you!

Thank you,

- Zach

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [October 28, 2023, 1:02am UTC](https://developer.sailpoint.com/discuss/t/application-role-azure-ad/15672/3 "2023-10-28T01:02:47Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
