# Create an App Registration in Entra ID

*Applies to: Patch My PC Cloud*

There may be some scenarios (such as [Recover Your Company](/patch-my-pc-cloud/manage/manage-settings/company-settings/recover-company.md) ) where you need to create an App Registration in Entra ID for use with Patch My PC (PMPC) Cloud.

{% hint style="warning" %}
**Important**

Once you create an App Registration, it must be used within 72 hours; otherwise, it will be considered expired, and you will need to create a new one.
{% endhint %}

We use this process to verify you are an Application Administrator or a higher privilege user (such as a Global Admin), in the same Entra ID tenant as the PMPC Company being managed.

To create an App Registration:

1. Sign in to the Microsoft Azure portal using an account with the Global Admin role and navigate to the [App Registrations](https://portal.azure.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade) blade.

{% hint style="warning" %}
**Important**

You must use an account in the same Microsoft 365 subscription (tenant) as your PMPC Company.
{% endhint %}

<figure><img src="/files/hYS7b2lJOI6SleM2fOQl" alt="Navigating to the &#x27;App registrations&#x27; blade" width="563"><figcaption></figcaption></figure>

2. Click **New registration**.

<figure><img src="/files/VxKGm6K4F7xOnrAZUSvu" alt="Clicking &#x27;New registration&#x27;" width="563"><figcaption></figcaption></figure>

3. In the **Name** field, enter **PMPC Recovery**, then click **Register**.

<figure><img src="/files/wKOpabg74oEEkbAXw0Ny" alt="Entering &#x27;PMPC Recovery&#x27; then clicking &#x27;Register&#x27;" width="563"><figcaption></figcaption></figure>

4. Make a note of the following values:
   1. **Application (client) ID**
   2. **Object ID**
   3. **Directory (tenant) ID**

<figure><img src="/files/mTpyMh8epUmSklbdZkw7" alt="Noting the required values" width="563"><figcaption></figcaption></figure>

5. Navigate to **Manage | API Permissions**.

<figure><img src="/files/Ldw80drHJPHDfV5YuGiI" alt="Navigating to &#x27;Manage | API Permissions&#x27;" width="563"><figcaption></figcaption></figure>

6. Under the **Configured permissions** section, click **Add a permission**.

<figure><img src="/files/pz1BEIPYv25lfeWbQTn0" alt="Clicking &#x27;Add a permission&#x27;" width="563"><figcaption></figcaption></figure>

7. In the **Request API permissions** blade, click **Microsoft Graph**.

<figure><img src="/files/yrJt1BvBuyg0pXnfYKhH" alt="Clicking &#x27;Microsoft Graph&#x27;" width="563"><figcaption></figcaption></figure>

8. In the **Request API permissions** blade, click **Application permissions**.

<figure><img src="/files/gRrFTn9dYP5aiKJ5mFRO" alt="Clicking “Application permissions”" width="563"><figcaption></figcaption></figure>

9. In the **Select permissions** field, type **AuditLog**, then expand this section and check the **AuditLog.Read.All** permission checkbox.

<figure><img src="/files/NwNtWYp3jiMrenZKK8ca" alt="Checking the &#x27;AuditLog.Read.All&#x27; permission checkbox" width="563"><figcaption></figcaption></figure>

10. Click **Add permissions**.

<figure><img src="/files/71xEY3lNvqTQTAl8gy5B" alt="Clicking &#x27;Add permissions&#x27;" width="563"><figcaption></figcaption></figure>

11. On the **API permissions** screen, under the **Configured permissions** section, click **Grant admin consent for <*****your\_tenant\_name*****>**.

<figure><img src="/files/7O5fErOjLZXayFgAbJKM" alt="Clicking &#x27;Grant admin consent for <your_tenant_name>&#x27;" width="563"><figcaption></figcaption></figure>

12. On the **Grant admin consent confirmation** popup, click **Yes**.

<figure><img src="/files/sA7rd5Igb93pFlV3WX2O" alt="Clicking &#x27;Yes&#x27; on the &#x27;Grant admin consent confirmation&#x27; popup" width="563"><figcaption></figcaption></figure>

The **Grant consent - Grant consent successful** notification is shown and the **Status** for the **AuditLog.Read.All** permission changes to a green tick.

<figure><img src="/files/FYpARQRrnjuAlLLiNbV8" alt="&#x27;Grant consent - Grant consent successful notification&#x27; shown and the &#x27;Status&#x27; for the &#x27;AuditLog.Read.All&#x27; permission changes to a green tick." width="563"><figcaption></figcaption></figure>

13. Navigate to **Certificates and secrets**.

<figure><img src="/files/hbznevDogTXhva1UTspp" alt="Navigating to &#x27;Certificates and secrets&#x27;" width="563"><figcaption></figcaption></figure>

14. Under the **Client secrets** section, click **New client secret**.

<figure><img src="/files/OGcPUpTTGxwqC6ME1u0a" alt="Clicking &#x27;New client secret&#x27; under the &#x27;Client secrets&#x27; section" width="563"><figcaption></figcaption></figure>

15. In the **Add a client secret** panel, type **PMPC Recovery**, then click **Add**.

<figure><img src="/files/CiUwqdy1FF1StLOxKD3P" alt="Typing &#x27;PMPC Recovery&#x27; in the &#x27;Description&#x27; field, then clicking &#x27;Add&#x27;" width="563"><figcaption></figcaption></figure>

The new Client Secret appears along with the **Update application credentials - Successfully updated application PMPC Recovery credentials** notification.

<figure><img src="/files/psmTY3ipSpwl8jUxX22y" alt="New Client Secret and the &#x27;Update application credentials - Successfully updated application PMPC Recovery credentials&#x27; notification" width="563"><figcaption></figcaption></figure>

16. Make a note of the **Value** of the **PMPC Recovery** client secret.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.patchmypc.com/patch-my-pc-cloud/technical-references/entra-id-reference/create-an-app-registration-in-entra-id.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
