Folks, my Azure Portal pages have changed subtly sometime over recent months and I can no longer find a way of assigning a role to an app. It tooks hours to figure out how to do this a year ago and I wrote down instructions for myself, but they don't apply any more due to UI changes. I have created an App in the AD blade and I have its name, Id and secret. I want this app to have read access to my subscription so it can enumerate accounts, containers, etc. I go to the Subscriptions > IAM > Role Assignments. + Add Role Assignment > select *Reader* > at this point I expect Select members to offer me my app for the role, but it never appears in the list on the right. That's where I've been stuck for days now. I can't give my app the Reader role to my subscription. Are there any Azure portal boffins who know how to do this? Thanks, *Greg K*