def METHOD_NAME(
    service_principal: model.azure.AzureServicePrincipal,
    access_token: str,
    azure_app_root_url: str = 'https://graph.microsoft.com/v1.0/applications'
) -> typing.Iterable[PasswordCredential]:
    response = requests.get(
        url=f'{azure_app_root_url}/{service_principal.object_id()}',
        headers={'Authorization': f'Bearer {access_token}'},
    )
    response_dict = response.json()
    if not (password_credentials := response_dict.get('passwordCredentials')):
        # no keys
        logger.warning(
            f"No password-credentials found for service principal '{service_principal.name()}'"
        )
        return []
    return [PasswordCredential(**e) for e in password_credentials]