Power Platform Service Account Vs. Service Principal

Ғылым және технология

Power Platform Service Account Vs. Service Principal
Hey Everyone,
In this video we will take a closer look at the differences between service account and service principal for using a connector. I will walk you through how to leverage the two and also look at the pros and cons.
Table of contents
Introduction 00:00
What are these accounts? 00:42
Creating a Service Principal 04:19
Initial set of information 05:40
Create a client secret 06:22
API permissions 10:28
Assign application user 12:36
Creating test flow #1 16:10
Change to service principal 17:32
Test flow #1 19:43
Modify test flow #1 20:37
Flow triggered by the maker 23:39
Flow triggered by run only user 25:17
Differences between accounts 29:17
Why you should consider them 31:00
Conclusion 32:26
Helpful link(s)
learn.microsoft.com/en-us/azu...
learn.microsoft.com/en-us/azu...
learn.microsoft.com/en-us/pow...
#PowerPlatform #ServiceAccount #ServicePrincipal #Security
Contact information:
Twitter: / dchristian19
Facebook: / www1.christianfamily.biz
Instagram: / dan.christian.33
LinkedIn: / danchristian19
Join this channel to get access to perks:
www.youtube.com/@DanielChrist...

Пікірлер: 52

  • @jace4817
    @jace4817Ай бұрын

    My Power Plattform admin sent me this link so I can decide if I want to proceed with a Service Account or a Service Principle. Great video, thank you.

  • @DanielChristian19

    @DanielChristian19

    Ай бұрын

    Your admin as great taste in videos 😊. Thanks for the compliment.

  • @mrtechstawk
    @mrtechstawkАй бұрын

    Great video. Thanks!

  • @DanielChristian19

    @DanielChristian19

    Ай бұрын

    Glad you liked it!

  • @ankita199
    @ankita1996 ай бұрын

    I really appreciate the way you covered the difference between Service Account and Principal. The demo with configuration was very helpful.

  • @DanielChristian19

    @DanielChristian19

    6 ай бұрын

    Glad it was helpful!

  • @mannyb4265
    @mannyb4265Ай бұрын

    Very thorough and clear. Thank you.

  • @DanielChristian19

    @DanielChristian19

    Ай бұрын

    Glad it was helpful!

  • @cvkealey
    @cvkealey11 ай бұрын

    Thank you! I've been looking for something clear and concise on this exact topic for a while. Most of the apps and flows we're building and deploying are SharePoint-based, so it sounds like Service Principals won't really help us much (or at all). Unfortunately, due to the licensing requirement and cost, it's difficult for us to leverage service accounts. Also, the shared nature of those accounts makes our tenant admins and infosec team hesitant to approve their use.

  • @DanielChristian19

    @DanielChristian19

    11 ай бұрын

    You're very welcome!

  • @amandipdhillon5932
    @amandipdhillon59326 ай бұрын

    Thank you for this, its so clear and tells me everything I was missing.

  • @DanielChristian19

    @DanielChristian19

    6 ай бұрын

    Glad it was helpful!

  • @sandeepadode1
    @sandeepadode19 ай бұрын

    Thank you! This is exactly what I was looking for.

  • @DanielChristian19

    @DanielChristian19

    9 ай бұрын

    Glad it was helpful!

  • @ArohShukla
    @ArohShukla9 ай бұрын

    wow, Dan this is something I also got confused at times. you explained beautifully. Thank you so much!

  • @DanielChristian19

    @DanielChristian19

    9 ай бұрын

    You're very welcome!

  • @juandavidvelasquezbe
    @juandavidvelasquezbe4 ай бұрын

    "run-only permissions" save me, thank you Daniel, I was looking why my azure key vault connection wasn't available for other users

  • @MrAmehmood
    @MrAmehmood9 ай бұрын

    Amazing, keep up the great work Dan

  • @DanielChristian19

    @DanielChristian19

    9 ай бұрын

    Thanks, will do!

  • @PascalCasti
    @PascalCasti11 ай бұрын

    Thank you so much Daniel ! you save my day 😉😉

  • @DanielChristian19

    @DanielChristian19

    11 ай бұрын

    Glad to hear that!

  • @chickenofmann8474
    @chickenofmann84747 ай бұрын

    Great video! You earned yourself a new sub. Thank you so much for putting this together.

  • @DanielChristian19

    @DanielChristian19

    7 ай бұрын

    Thanks for the sub!

  • @thecoreYalex
    @thecoreYalex11 ай бұрын

    Nice Video! Thank you so much! I am still learning things, it's so nice that you offer some informations for free.

  • @DanielChristian19

    @DanielChristian19

    11 ай бұрын

    Happy to help!

  • @shaiksamad1562
    @shaiksamad15627 ай бұрын

    Daniel... Excellent video and very neatly explains. Thanks for your patience and efforts.

  • @DanielChristian19

    @DanielChristian19

    7 ай бұрын

    My pleasure!

  • @camgross1487
    @camgross14872 ай бұрын

    All your videos are great! Please don't stop! You explained this so well. 🙂🙂🙂🙂

  • @DanielChristian19

    @DanielChristian19

    2 ай бұрын

    Thank you! Will do!

  • @lolamnotapunk
    @lolamnotapunk2 ай бұрын

    Very informative. Thank you.

  • @DanielChristian19

    @DanielChristian19

    2 ай бұрын

    Glad it was helpful!

  • @bapi9398
    @bapi939811 ай бұрын

    Very good video, very useful, thank you! Do you have a list of datasources accepting the Service Principal?

  • @MJ-bn7rw
    @MJ-bn7rw4 ай бұрын

    Big Thanks for this. Excellent Video. I just have a question, can service principal help with sending emails on behalf of other users for the action : send email v(2) - outlook, knowing that its an automated flow

  • @MuFeR.
    @MuFeR.11 ай бұрын

    For the change with the run only user shown at 27:42 wouldn't the user who runs it (Finn in this case) need write access to the dataverse table? While the way it was run previously with the service principal, even if Finn had no access to the table it would work since his access level wouldn't really matter in this case right?

  • @flynnfu9874
    @flynnfu98749 ай бұрын

    Great video and thanks for the explanation. I wanted to ask if you know whether we are also able to use the service principle for the Microsoft Entra ID connector ?

  • @renukabani2781
    @renukabani27816 ай бұрын

    This is very helpful. Thank you for sharing the knowledge. Do we need service account when publishing the flow having premium connector connected to DB with SPN?

  • @user-cc8eh1wz9q
    @user-cc8eh1wz9q11 ай бұрын

    Good articulation !! Is there any specific reason that SPN authentication supporting in Power Automate but not in Power Apps?

  • @amitmaheshwari8293
    @amitmaheshwari82932 ай бұрын

    Hey Daniel, Slightly confused with your statement around service principal not requiring licenses. I understand from MS documentation that either per flow or automate process licenses are needed for service principal owned premium flows. Can you please confirm.

  • @DanielChristian19

    @DanielChristian19

    2 ай бұрын

    Sure. What I meant is that no additional license is need for the utilization of the service principal connection to the data source. However, the flow maker (and maybe users) will need the license.

  • @amitmaheshwari8293

    @amitmaheshwari8293

    Ай бұрын

    @@DanielChristian19 got it! And thank you for all the content that you have made available.

  • @amitmaheshwari8293

    @amitmaheshwari8293

    Ай бұрын

    A thought on the above point - Based on my understanding, for instance, if a premium scheduled flow is owned by a service principal, it would become a costlier option. This seems like a significant drawback to adopting them. Otherwise, service principals are definitely a thumbs up.

  • @julien8979
    @julien897911 ай бұрын

    Amazing video!! One question Can we have a policy or a flow to auto-renew the key of the application ID and have this reflected to the service principal flow connection to avoid any flow failure when the key is expired?

  • @DanielChristian19

    @DanielChristian19

    11 ай бұрын

    Hey Julien, Even if this was possible, I would recommend doing it for those who have an exception because reviewing your Azure apps on a regular basis will help keep that Azure apps list clean.

  • @user-fl1bk3th4s
    @user-fl1bk3th4s7 ай бұрын

    Thanks Dani, Service Principal option available on Dataverse. can we use service principal to access SharePoint or other office 365 services. Thanks

  • @DanielChristian19

    @DanielChristian19

    7 ай бұрын

    No, unfortunately, it is currently not available for SharePoint 😕

  • @hansjoshi3882

    @hansjoshi3882

    7 ай бұрын

    Yes we can use Service Principal to access SharePoint Online

  • @ResponsibleXI
    @ResponsibleXI11 ай бұрын

    Does that mean using service principal, I don't need any premium license to create flows with Dataverse?

  • @DanielChristian19

    @DanielChristian19

    11 ай бұрын

    The person making the flow will need the license.

  • @kadichidu4171
    @kadichidu417111 ай бұрын

    Please make videos on power apps projects from scratch

  • @DanielChristian19

    @DanielChristian19

    11 ай бұрын

    Will do.

  • @rahulnijhawan1
    @rahulnijhawan111 ай бұрын

    Great video ! can you also create a video on Service Principal vs Managed Identity pls?@DanielChristian19

  • @DanielChristian19

    @DanielChristian19

    11 ай бұрын

    I'll add this to my to-blog list. Thanks Rahul!

Келесі