What is the App Registration quota or limit to query different applications?

elukhan 0 Reputation points
2025-04-22T01:37:58.47+00:00

Hi everyone,

I've been searching through the documentation, but I haven't found specific details about quota limitations for App Registrations, especially when ingesting data into different Azure services like Azure Log Analytics tables or Azure Data Explorer tables.

  • Are there any quota restrictions on the number of App Registrations or their usage when interacting with Azure services?

Would it be advisable to create multiple App Registrations per service to optimize performance and avoid potential throttling?

What are the recommended best practices for managing App Registrations when querying different Azure applications?

I've checked these resources, but they don't seem to explicitly cover App Registration quotas:

If anyone has insights or relevant documentation, I'd greatly appreciate the guidance!

Thank you very much in advance!

Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,261 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Luis Arias 8,441 Reputation points
    2025-04-22T12:05:14.48+00:00

    Hello elukhan,

    Welcome to Q&A, as far as I know, it's not something explicitly mentioned in Azure documentation or at least, I haven't come across anything that directly addresses it. It's kind of a blank spot, so we can only infer things based on other related limits, but it's worth noting that these inferences aren't official and should be taken with a pinch of salt. So answering yor question one by one:

    Here’s what I can gather:

    • About quotas: While there’s nothing official on App Registration limits, some Azure services like Log Analytics and Azure Monitor have their own caps. For instance, daily data ingestion limits or throttling on API calls might indirectly affect how many requests an App Registration can handle. But again, this is more connecting the dots rather than solid confirmation
    • Creating multiple App Registrations: Splitting up tasks across multiple App Registrations could help balance the load and reduce throttling risks, especially for heavy usage. Just keep in mind the management overhead and any security headaches that might come with this approach.
    • Managing them smartly:
      • Optimize your queries to avoid overloading any resources.
      • Keep an eye on how much you're using monitor API calls and data ingestion rates regularly.
      • Set clear permissions for each App Registration to stay on top of security.

    References:

    If the information helped address your question, please Accept the answer.

    Luis

    0 comments No comments

  2. Sanoop M 2,660 Reputation points Microsoft External Staff
    2025-04-24T09:44:38.7266667+00:00

    Hello @elukhan,

    In addition to the information provided by @Luis Arias , I am providing you the additional details which will be helpful.

    Please note that there is no specific restrictions to create multiple App Registrations per service.

    Regarding your query, Are there any quota restrictions on the number of App Registrations or their usage when interacting with Azure services?

    Please note that you can create a custom role with permission to create an unlimited number of app registrations, and then assign that role to a user. The assigned user can then use the Microsoft Entra admin center, Microsoft Graph PowerShell, or Microsoft Graph API to create application registrations. Unlike the built-in Application Developer role, this custom role grants the ability to create an unlimited number of application registrations. The Application Developer role grants the ability, but the total number of created objects is limited to 250 to prevent hitting the directory-wide object quota. The least privileged role required to create and assign Microsoft Entra custom roles is the Privileged Role Administrator.

    If you don't have an Azure subscription, create a free account before you begin.

    Prerequisites

    • Microsoft Entra ID P1 or P2 license
    • Privileged Role Administrator
    • Microsoft Graph PowerShell module when using PowerShell
    • Admin consent when using Graph explorer for Microsoft Graph API

    Create a custom role

    1.Sign in to the Microsoft Entra admin center as at least a Privileged Role Administrator.

    2.Browse to Identity > Roles & admins > Roles & admins.

    3.Select New custom role.

    Screenshot of Roles and administrators page in Microsoft Entra admin center.

    4.On the Basics tab, enter "Application Registration Creator" for the name of the role and "Can create an unlimited number of application registrations" for the role description, and then select Next.

    Screenshot of Basics tab to provide a name and description for a custom role. 5. On the Permissions tab, enter "microsoft.directory/applications/create" in the search box, and then select the checkboxes next to the desired permissions, and then select Next.

    Screenshot of Permissions tab to select the permissions for a custom role. 6.On the Review + create tab, review the permissions and select Create.

    Assign the role

    1.Sign in to the Microsoft Entra admin center as at least a Privileged Role Administrator.

    2.Browse to Identity > Roles & admins > Roles & admins.

    3.Select the Application Registration Creator role and select Add assignment.

    4.Select the desired user and click Select to add the user to the role.

    Reference document: Create a custom role with permissions to create unlimited app registrations - Microsoft Entra ID | Microsoft Learn

    I hope this above information provided is helpful. Please feel free to reach out if you have any further questions.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.