az ad sp create-for-rbac
Create an application and its associated service principal, optionally configure the service principal's RBAC role assignments. Azure CLI reference
13 options Its page in the Azure CLI reference
Options
--appendAppend the new credential instead of overwriting.--certCertificate to use for credentials.--create-certCreate a self-signed certificate to use for the credential.--create-passwordCreate a password credential (secret) on the the application.--display-name, --name, -nDisplay name of the service principal.--end-dateFiner grain of expiry time if '--years' is insufficient, e.g. '2020-12-31T11:59:59+00:00' or '2299-12-31'--json-auth, --sdk-authOutput service principal credential along with cloud endpoints in JSON format.--keyvaultName or ID of a KeyVault to use for creating or retrieving certificates.--roleRole of the service principal.--scopesSpace-separated list of scopes the service principal's role assignment applies to.--service-management-referenceSet the serviceManagementReference property of the created application.--skip-assignmentNo-op.--yearsNumber of years for which the credentials will be valid.