Adding User Account Authentication for Configuration Manager SaaS

  • Last update on November 10th, 2025

If you want to enable additional configurations managed with user account authentication, and your tenant was initially onboarded using the Service Principal authentication method, you must add User Account Authentication to Configuration Manager. 

To do so, follow the steps below. 

You must have a Global Administrator account on your tenant’s Azure AD environment to complete these steps.

 

Step 1: check if delegated permissions are missing 

Step 1: check permissions status

Navigate to the Configuration Management page in CoreView. Verify whether the required delegated permissions are already granted.  If any permissions are missing, follow the instructions in the “Configuration management” article for step-by-step guidance on adding them directly from the Azure Portal.

Step 2: enable User Account Authentication:

Confirm that the Configuration Manager App has all the necessary delegated permissions assigned. If any permissions are missing, they will be indicated by a “Some configurations/consents are required” banner, and marked with the “Permission Required” badge in Settings > Configuration Management. 

Note: changes may take up to one day to be reflected in the CoreView App, so newly granted permissions will appear as correctly assigned the following day. 

 

Now,

  • If all permissions are granted, proceed with step 2.
  • If permissions are missing, follow this guide to grant them. 

Step 2: create the Management Service Account in CoreView

Follow the guide “Configure your tenant to enable the management session” to create the Management Service account in CoreView. 

Please, note that this step is mandatory.