No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

ok, Azure App Registrations and API Permissions: where do those exist in `azuread`?

Depends on which permissions you are referring to..

I believe Graph API permissions are here: <https://www.pulumi.com/registry/packages/azuread/api-docs/applicationapiaccess/|azuread.ApplicationApiAccess>

And for defining custom application scopes:
<https://www.pulumi.com/registry/packages/azuread/api-docs/applicationpermissionscope/|azuread.ApplicationPermissionScope>

For setting the Application URI you would use <https://www.pulumi.com/registry/packages/azuread/api-docs/applicationidentifieruri/#azuread-applicationidentifieruri|azuread.ApplicationIdentifierUri>

Graph permissions can also be done with `required_resource_access`, I think.

I ended up using `Application`, `ServicePrincipal`, `ApplicationPassword`, and `RoleAssignment` for this specific use-case