A botanical-garden SaaS has no enterprise-application owners, so ev…

Question

A botanical-garden SaaS has no enterprise-application owners, so every SSO certificate renewal waits on a Global Administrator. What assignment fixes day-to-day ownership of that app’s tenant settings?

Accepted Answer

Assign at least two users as owners on the enterprise application so they can manage that app’s tenant-specific settings. — No owners means every certificate renewal becomes a Global Admin ticket. Put at least two people on the enterprise-app Owners blade so the garden can renew SSO settings without waking the whole tenant admin team.

Answer

Assign Azure RBAC Owner on the subscription that hosts related VMs so those users inherit enterprise-app admin rights.

Answer

Create a custom Microsoft Entra role JSON definition that duplicates Global Administrator for the garden staff.

Answer

Move the application object into a new app registration owned by the garden and delete the enterprise application.

A botanical-garden SaaS has no enterprise-application owners, so every SSO certificate renewal waits on a Global Administrator. What assignment fixes day-to-day ownership of that app’s tenant settings?

Short Explanation

Full Explanation