# Create an app registration

{% hint style="warning" %}
**Note:** Though it looks similar, note that the steps for the **EmbedFAST API Auth** and for the **Power BI Service** are NOT exactly the same.

There may be differences in the steps detailed in this section.
{% endhint %}

To create an app registration, you must have one of the following Microsoft Entra roles:

* Global Administrator
* Cloud Application Administrator&#x20;

{% hint style="info" %}
**Note:** A Global Administrator is typically the person who signs up for the Microsoft Entra ID tenant. View the guide on [assigning Microsoft Entra roles to users](https://learn.microsoft.com/en-us/azure/active-directory/roles/manage-roles-portal) for more information.
{% endhint %}

1.  Type “**Microsoft Entra ID**" in the [Azure portal](https://portal.azure.com) search bar and select said option as it appears.&#x20;

    <figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2F1mV80Cd1qFZ4Ae6Rc5ya%2F16.2%20(1).png?alt=media&#x26;token=4814e0e9-86a8-460c-bfa0-3af4660bb20f" alt=""><figcaption></figcaption></figure>
2.  Select **App registrations** (under Manage) from the left pane and click on **New registration**. This will take you to the **Register an application** page.&#x20;

    <figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FDjxafFZ72GIZrbIFi4HI%2F16.4%20(1).png?alt=media&#x26;token=f0b96f1f-b77a-4d8e-af7a-8e12b2452617" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FCU7kFQsvCN1T1yhjhZsT%2F2.6.png?alt=media&#x26;token=f4486209-a1aa-49d1-8f2d-3a092137d401" alt=""><figcaption></figcaption></figure>

4. Enter an application name in the **Name** section. This will be displayed to users and can be changed later.&#x20;
5.  Under the **Supported account types** section, select one of these options:

    * **Accounts in any organizational directory (------ only - Single tenant)** option (in our example, the "**------**" is MAQ Demo, but this blank should have the name of your tenant instead).
    * **Accounts in any organizational directory (Any Azure directory - Multitenant)** option.



    {% hint style="info" %}
    **Note:** Either option will work. The choice between them depends on factors such as organizational policies, preference, etc.
    {% endhint %}

    &#x20;
6. Click on **Register** to create the application.
7. After the app registration is created, you will see a summary page listing the details of your application.

<figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2FIJiOP7L3WFh8fxo0UZt7%2F2.7.png?alt=media&#x26;token=219970f5-719e-42a8-aff2-44f533338245" alt=""><figcaption></figcaption></figure>

8. Select **Manifest** (under Manage) from the left pane to modify the JSON Representation as follows:&#x20;

<figure><img src="https://2643060172-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIwWVFb1sEdUq6IwVu5D2%2Fuploads%2Fzh936o8cQXkhEliXPlxd%2F2.8.png?alt=media&#x26;token=5a05cb3d-13fa-4ceb-9950-6f42b5c7c3c2" alt=""><figcaption></figcaption></figure>

9. Set the **“allowPublicClient”** property to **true**.
10. Set the **“oauth2AllowIdTokenImplicitFlow”** property to **true**.&#x20;
11. Click on **Save** after the 2 changes are made.
