claudetools/.claude/memory/feedback_entra_app_owner.md at eed3ece2c7a30d7eb531c8fea6533d2f2cbdb234

Files

Mike Swanson 2a1ccfac73 Add memory-dream skill + additive cross-machine memory sync

memory-dream: read-only memory lint/consolidation analyzer (index, backlinks,
stale refs, dup clusters, profile drift); additive-only --apply-safe, all
merges/deletes are proposals. sync-memory.sh: additive repo<->harness-profile
union (no delete/overwrite, conflicts surfaced), wired to a SessionStart hook.
Migrates the useful profile-only memories into the synced repo store.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-01 15:22:12 -07:00

1.1 KiB

Raw Blame History

name, description, type, originSessionId

name	description	type	originSessionId
Add Mike as owner on all Entra apps	Apps created via management SP have no user owner — must add Mike manually or publisher verification fails	feedback	045c6ef2-5711-4aca-b86f-55506c9b6ada

After creating any Entra app registration via the ComputerGuru-Management service principal, always add Mike (f34ebe40-9565-4135-af4c-2e808df57a25) as an owner immediately.

Why: Apps created via client credentials have no user owner. Microsoft requires a user owner to perform publisher verification (MPN badge). Without this step, the portal shows "A verified publisher cannot be added to this application."

How to apply: After every POST /v1.0/applications call, immediately run:

curl -sk -X POST \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  "https://graph.microsoft.com/v1.0/applications/{APP_OBJ_ID}/owners/\$ref" \
  -d '{"@odata.id":"https://graph.microsoft.com/v1.0/directoryObjects/f34ebe40-9565-4135-af4c-2e808df57a25"}'

Mike's user object ID: f34ebe40-9565-4135-af4c-2e808df57a25

1.1 KiB Raw Blame History

1.1 KiB

Raw Blame History