The IT administrator is responsible for provisioning infrastructure and services that are reused and consumed by multiple applications within the enterprise. The services provisioned by the IT administrator include centralized monitoring and log management, provisioning of Key Vaults, storage accounts, and service accounts that are consumed by individual application and release management to perform their deployment and management operations in their environments. Access to these services are constrained and limited to authorized administrators only.
An IT administrator will log in to the Azure subscription with his credentials and create a new Azure AD application, an Azure AD service application, and provide the owner's permissions to the service application on the subscription. Individual application owners and release management will use this Azure AD service application to log in to Azure and perform management actions to deploy, update, and configure...