In PowerApps, I saw that theres 3 options of the Azure blob storage. I was wondering how the Service Principal works since Ive been using Access Keys the entire time and i read in a documentation that its not encourage to use (security wise). I have the app registration and i was able to create the storage account and container as well. I also got to assign the app registration to the storage account in the Access Control with the role Storage Blob Contributor. I thought that if you add users to the app registration, those users can now access the blob storage as well. Is that right? or am i missing something?
When a user tried to access the app, its asking for the user to sign in and for the client id, secret, and token id which the user isnt supposed to know those.