Azure App Registration

Azure App Registration

SwissKnife talks to Microsoft Graph through your own Entra ID (Azure AD) app registration. You create it once, grant permissions, and give the app its Tenant ID / Client ID (and a secret for app-only mode).

1. Create the registration

1. Go to Entra admin center → Identity → Applications → App registrations → New registration.
2. Name it (e.g. SwissKnife), leave Supported account types as Single tenant, click Register.
3. On the Overview page copy the Application (client) ID and Directory (tenant) ID.

2. Pick an authentication mode

SwissKnife supports two modes — see Connecting for how to use each.

App-only (client credentials) — acts as the app, tenant-wide

1. Certificates & secrets → New client secret → copy the Value immediately (shown once).
2. API permissions → Add a permission → Microsoft Graph → Application permissions — add the permissions your work needs (see Permissions).
3. Click Grant admin consent for your tenant.

Delegated (device code) — acts as the signed-in user, with their rights

1. Authentication → Advanced settings → Allow public client flows → Yes.
2. API permissions → Add a permission → Microsoft Graph → Delegated permissions — add what you need.
3. No client secret is required.

3. Connect

Open SwissKnife → Connect, enter Tenant ID + Client ID (+ secret for app-only), pick the mode, and click Connect. Tick Remember to store the profile (the secret goes to your OS keychain, never to disk in plain text).

Least privilege

Only grant what you use. The app has a Settings → Check access button that probes each feature and can hide tabs you have no permission for, keeping the window focused. Start with the core set in Permissions and add more as needed.