command: service principal for login

[yugangw-msft]

Notes:

1. We put 2 commands under account group for the reason that they are for login, not dealing with general service principal. In future, the placement might change.
2. role assignment create command contains the minimum, and it is not the final version. We will get to it when we are done with the network set commands
3. The new commands don't follow the default output format, as it means to output the credentials information as clear as possible for people to write down.
4. The access token acquired for management endpoint (our default case) will not work for the graph endpoint, so the profile management code gets updated to handle the new situation.

[yugangw-msft]

/CC:@JasonRShaver, submit this for demo on this Friday

[yugangw-msft]

/CC:@BurtBiel @tjprescott

(env) D:\sdk\azure-cli>az account -h

Group
    az account

Commands:
    clear
    create-sp
    list
    list-location
    reset-sp-credentials
    set

(env) D:\sdk\azure-cli>az account create-sp -h

Command
    az account create-sp

Arguments
    --name -n  : An unique uri. If missing, the command will generate one.
    --secret   : The secret used to login. If missing, command will generate one.
    --years    : Years the secret will be valid.  Default: 1.

(env) D:\sdk\azure-cli>az account reset-sp-credentials -h

Command
    az account reset-sp-credentials

Arguments
    --name -n [Required]: The uri representing the name of the service principal.
    --secret            : The secret used to login. If missing, command will generate one.
    --years             : Years the secret will be valid.  Default: 1.

[BurtBiel]

black forest?

[yugangw-msft]

You are right on this, we are missing usgovenment as well. Since we have not exposed the --env flag in login, this can wait till we add that flag.

[yugangw-msft]

@BurtBiel, @tjprescott, since this is needed by demo, i am doing optimistic merge, please still feel free to leave comments later.

[jiasli]

azure-cli/src/command_modules/azure-cli-role/azure/cli/command_modules/role/custom.py

Line 15 in 97ecf82

role_defs = list(definitions_client.list(scope, "roleName eq '{}'".format(role)))

Using roleName as a filter is not a documented feature of Role Definitions - List REST API.

https://learn.microsoft.com/en-us/rest/api/authorization/role-definitions/list

https://learn.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list#list-role-definitions