Skip to main content

Microsoft Azure Permissions

Only an Azure AD administrator with sufficient privileges can give the necessary consent

Updated over 2 weeks ago

Swydo uses an Azure AD application to access the Microsoft Advertising API. If your organization uses Azure AD, you'll need to create a service principal for Swydo's Azure AD application so that your work accounts can connect to Microsoft Advertising within Swydo. Note that a service principal is different from an Azure AD application, and there’s no need for your organization to register new Azure AD applications. For more details, you can refer to Microsoft's documentation on service principals and applications, and how to create service principals.

Here’s how a service principal gets created:

1. Consent to Permissions:

When someone in your organization uses their work account to connect to Microsoft Advertising in Swydo, they'll be asked to consent to the necessary permissions. This is done during step 1 of the data source connection

process in Swydo. The work account needs to have sufficient Azure AD privileges to

give this consent.


2. Handling Insufficient Privileges:

If your organization has an admin consent workflow-enabled, the user will see a

dialog box allowing them to request permission from an Azure AD administrator.

The admin will then receive a notification in Azure AD with instructions on how to

grant consent to Swydo's application.

If there’s no admin consent workflow-enabled, an error message will direct the

user to this help article. In this case, only an Azure AD administrator with

sufficient privileges can give the necessary consent. The admin might need to

sign up for Microsoft Advertising and be added to the intended advertising

account in Swydo. Once step 1 of the connection process is completed, a service

principal is created, and the admin’s Microsoft Advertising account can be

deleted if it's no longer needed.


3. After Consent:

Once consent is given and a service principal is created, Swydo's Azure AD application will appear on your organization’s Enterprise Applications page.


This setup ensures that Swydo can securely access Microsoft Advertising data, allowing you to make the most of your reporting and analytics.

Did this answer your question?