---
id: post/jpearson-blog/1535
type: post
title: Calling Business Central Directly from a Managed Identity
summary: Managed identities can be granted Business Central API permissions directly via PowerShell without requiring federated credentials or app registrations. This enables Azure resources to call Business Central APIs securely without creating or storing client secrets.
tier: community
language: en
tags:
  - managed identity
  - api permissions
  - authentication
  - powershell
  - azure
  - entra
  - client secret
  - federated credentials
system: integration
review:
  state: reviewed
  by: opus
  at: "2026-10-08T02:00:07.614Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-post: 1
  input_hash: b38582115016b0da9884cc71144a510b65f99b144aac32aee11fa828a3b8c6a0
evidence:
  - kind: blog
    url: https://jpearson.blog/2025/07/18/calling-business-central-directly-from-a-managed-identity/
    title: Calling Business Central Directly from a Managed Identity
    date: "2025-07-18"
    commit: null
    t: null
    quote: null
  - kind: blog
    url: https://jpearson.blog/2025/07/18/calling-business-central-directly-from-a-managed-identity/
    title: Calling Business Central Directly from a Managed Identity
    date: "2025-07-18"
    commit: null
    t: null
    quote: You can assign Business Central (and other) API permissions to managed identities.
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
post_id: "1535"
source_id: jpearson-blog
source_name: James Pearson
url: https://jpearson.blog/2025/07/18/calling-business-central-directly-from-a-managed-identity/
published_at: "2025-07-18T11:54:00.000Z"
author: James Pearson
full_text: false
words: 636
quotes:
  - text: You can assign Business Central (and other) API permissions to managed identities.
    why_it_matters: Establishes the core capability that managed identities can directly receive BC API permissions without intermediate app registrations
code_objects_mentioned: []
systems:
  - integration
  - administration
  - platform
versions_mentioned: []
preview:
  embeddable: true
  frame_url: https://jpearson.blog/2025/07/18/calling-business-central-directly-from-a-managed-identity/embed/
  image: https://jpearson.blog/wp-content/uploads/2025/07/image-13.png
  image_alt: null
  image_w: 1070
  image_h: 496
  site_name: James Pearson
  favicon: https://jpearson.blog/wp-content/uploads/2018/09/cropped-semicolon.jpg?w=32
  probed_at: "2026-10-07T11:51:01.837Z"
---

# Calling Business Central Directly from a Managed Identity

[Read the post](https://jpearson.blog/2025/07/18/calling-business-central-directly-from-a-managed-identity/) · James Pearson (James Pearson) · 2025-07-18 · 636 words · tier community · reviewed (checked by Opus)

> Managed identities can be granted Business Central API permissions directly via PowerShell without requiring federated credentials or app registrations. This enables Azure resources to call Business Central APIs securely without creating or storing client secrets.

## Key points

- Assign API permissions directly to managed identities using Microsoft Graph PowerShell module
- Bypass the need for separate app registrations and federated credentials
- Create an Entra Application record in Business Central using the managed identity's client ID
- View assigned permissions through Azure Portal's Enterprise applications section or PowerShell
- Eliminates the need to create, store, and rotate client secrets for API access

## Quotes

- "You can assign Business Central (and other) API permissions to managed identities." (Establishes the core capability that managed identities can directly receive BC API permissions without intermediate app registrations)

## Context

- Features: API authentication, managed identity integration, Entra Application records, role assignment, app role permissions

Source: James Pearson, community blog. Summary, key points and quotes are derived (CONTENT-NOTICE.md); read the original for the full text.