App Registration Delete Script

Warning: Deleting app registrations, especially those created by Empower-Service is extremely dangerous and should only be done with caution. Contact Reza Mubeen before running this script.

Use Case

If for some reason, either a bug or the need for a fresh deployment, an app registration is created by Empower-Service but its secret is not saved in a key vault, it may need to be deleted and recreated.

First, determine whether or not the secret can be successfully rolled. This is not always the case. For instance, because databricks caches the app registration credentials it uses, rolling this secret is not advised.

If the app registration does need to be deleted and since no developer should login as Empower Service, a script needs to be run to delete app registrations created by this service principal.

Usage

Dependencies

whizbang-deployer >= 1.3.0a161
python >= 3.9.6

Arugments

arg1: The name of the app registration to delete as it appears in Azure Active Directory
arg2: The app id of the owner of the app registration
arg3: The password of the owner of the app registration

Additional Notes

If you cannot obtain the password to the owner of the app registration, you should not be running this script. Hence no easy environment, such as a pipeline with environment variables exists to run the script.