What are the rights needed by an AzureAD app in order to run the command Add-AzureADServicePrincipalPolicy from AzureAdPreview Module (Powershell)?

Question

I am the owner of an Azure AD registered application, and I need to run the command Add-AzureADServicePrincipalPolicy from AzureAdPreview Module (Powershell). Running the command throws back the following error:

For the moment, the registered app has only the following rights in "API permissions":

Tell, me please, which rights that command demands in order to be successful, as I might need to ask an admin if they require Admin consent? Or can it be my user's fault that it doesn't have enough rights?

Answer 1

You Need to have Azure AD's RBAC administrator roles to the user when authenticating with Connect-AzureAD,

For Example :- Any of the Application administrator,Global Administrator, ..etc is required.

Since, your account doesn't have permission you will return an error message containing "Insufficient privileges to complete the operation." Contact your Azure AD admin to grant you the required roles.

Reference here.