Sign in to Entra ID
Runs entirely in your browser — no backend server, nothing stored anywhere but your own browser's session. Sign in with your own organization's account.
First time your organization is using this? (admin)
This app needs your tenant admin to consent once to two scopes: Microsoft Graph
User.Read.All and Power Platform Authorization.RoleAssignments.Read/Write.
An admin can grant this by signing in here first, or by visiting the consent link in the README.
1. Find a principal
Assigning to an application (service principal) instead?
Role assignments require the Enterprise Application Object ID, not the App/client ID — this resolves it for you.
2. Choose a role
Recent activity (this session)
Updates immediately when you assign or remove a role — no tenant-wide refresh needed.
| When | Action | Principal | Role |
|---|---|---|---|
| No activity yet this session. | |||