What does a service principal represent in Azure AD (Entra ID)?
- A A physical device identity
- B A local application instance identity in a tenant (the 'agent' of an application registration) (correct answer)
- C A user account for automated tasks
- D A managed identity for Azure services
Shortcut: A service principal is the tenant-specific identity for an application or managed identity. The application registration defines the app globally; the service principal is the local instance in the tenant with permissions and consents.