azure-entra-application-client-secret-create-response
addPassword returns the new application secret exactly once and it can leak from provisioning output.
Where it sits
| location | microsoft.graph.passwordCredential.secretText |
|---|
| location kind | secret_value |
|---|
| data kinds | credential password |
|---|
| emits edge | ExposesCredential |
|---|
| service | Entra ID (azure:entra) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | POST /applications/{application-id}/addPassword |
|---|
| response path | secretText |
|---|
| encoding | json |
|---|
| params | {"application-id": "\u003capplication-id\u003e"} |
|---|
Required permissions
Application.ReadWrite.All
References