Azure Access Control requires the use of Azure AD Object IDs (also known as Principal IDs) in order to assign roles to a specific identity. This walkthrough shows you how to retrieve these from the Azure Portal. If you'd like to use the Azure CLI, you can follow these instructions instead.
Find a User Object ID
Sign in to the Azure portal.
Select Azure Active Directory from the menu.
Locate the Manage section on the menu and then select Users.
On the Users page, enter the user's name in the Search box.
Select the user's name where it appears on the list.
Locate the Basic info section on the user's Profile page. The Object ID that is displayed is the user's unique object ID.
Find a Group Object ID
Follow the same steps above to find a user ID, but instead start by selecting Groups:
Find a Service Principal ID
Sign in to the Azure portal.
Select Azure Active Directory from the menu.
Select App registrations.
Select your application and copy the Object ID.
Find a Managed Identity Object ID
Sign in to the Azure portal.
In the search box, enter Managed Identities. Under Services, select Managed Identities.
A list of the user-assigned managed identities for your subscription is returned. To see the details of a user-assigned managed identity, select its name.
Select the Object ID.
