Mike Swanson
2a1ccfac73
memory-dream: read-only memory lint/consolidation analyzer (index, backlinks, stale refs, dup clusters, profile drift); additive-only --apply-safe, all merges/deletes are proposals. sync-memory.sh: additive repo<->harness-profile union (no delete/overwrite, conflicts surfaced), wired to a SessionStart hook. Migrates the useful profile-only memories into the synced repo store. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
21 lines
1.1 KiB
Markdown
21 lines
1.1 KiB
Markdown
---
|
|
name: Add Mike as owner on all Entra apps
|
|
description: Apps created via management SP have no user owner — must add Mike manually or publisher verification fails
|
|
type: feedback
|
|
originSessionId: 045c6ef2-5711-4aca-b86f-55506c9b6ada
|
|
---
|
|
After creating any Entra app registration via the ComputerGuru-Management service principal, always add Mike (f34ebe40-9565-4135-af4c-2e808df57a25) as an owner immediately.
|
|
|
|
**Why:** Apps created via client credentials have no user owner. Microsoft requires a user owner to perform publisher verification (MPN badge). Without this step, the portal shows "A verified publisher cannot be added to this application."
|
|
|
|
**How to apply:** After every `POST /v1.0/applications` call, immediately run:
|
|
```bash
|
|
curl -sk -X POST \
|
|
-H "Authorization: Bearer $TOKEN" \
|
|
-H "Content-Type: application/json" \
|
|
"https://graph.microsoft.com/v1.0/applications/{APP_OBJ_ID}/owners/\$ref" \
|
|
-d '{"@odata.id":"https://graph.microsoft.com/v1.0/directoryObjects/f34ebe40-9565-4135-af4c-2e808df57a25"}'
|
|
```
|
|
|
|
Mike's user object ID: `f34ebe40-9565-4135-af4c-2e808df57a25`
|