Data services feedback portal

Welcome to our feedback site!


We created this site to hear your enhancement ideas, suggestions and feedback about CONNECT products and services. All of the feedback you share here is monitored and reviewed by the CONNECT product managers.

To start, take a look at the ideas in the list below and VOTE for your favorite ideas submitted by other users. POST your own idea if it hasn’t been suggested yet. Include COMMENTS and share relevant business case details that will help our product team get more information on the suggestion. Please note that your ideas and comments are visible to all other users.


This page is for feedback specifically for CONNECT data services. For links to our other feedback portals, please see RESOURCES below.

Add a new idea Subscribe
Status No status
Product General
Categories Security
Created by Guest
Created on Nov 6, 2025

RELATED IDEAS

Be able to create ClientID without being Admin

Currently, a user must have the Tenant Administrator role to create a Client ID.

Part of configuring egress from an edge device to CONNECT data services requires a Client ID and Client Secret to be created (Prepare egress destinations) and supplied as part of the egress configuration (Configure periodic data egress).

In order to do this currently, the technician configuring must be granted Tenant Administrator, which is more permission than preferred.

Requesting the ability to specifically grant permission to create a Client ID to non-Tenant Administrators.


Use-case:
My main issue is for the enrollment process of an edge device. We have created a tool to help by creating a client ID but this tool can’t use an admin account to create ClientID as this software is used for different Tenant and namespace at the end.

The only way we have found is to provide the Admin role to the technician that he doing the enrollment phase but by doing this, technician are now full admin of tenant and can cause issue. That why we want to restrict.

  • Attach files
  • Valentin Montmirail
    Nov 7, 2025

    This capability is critical for secure and scalable deployment at the edge.

    During the enrollment phase, our edge devices need to create a Client ID dynamically to establish egress to CONNECT Data Services. Currently, this requires the technician performing the enrollment to hold Tenant Administrator permissions which grants far broader access than necessary and introduces avoidable security risks.

    Allowing a more granular permission (e.g., a dedicated “Create Client ID” or “App Registration” role) would align with least-privilege principles and significantly improve automation, security, and operational efficiency for all deployments.

    This is a blocker for scaling field enrollment securely!


    Reply