title: Several Azure AD. New-MsolServicePrincipal : Access Denied
body: <p>I want to set my Azure Active Directory as an identity provider for SharePoint 2013 Foundation. I activated Azure trial from account that is a part of another infrastructure (my company's infrastructure). So what i have now:</p>
  
  <ul>
  <li>Azure VM with SharePoint 2013 Foundation installed. Created by me for testing purposes</li>
  <li>Azure Active Directory that is a part of my company's infrastructure. I don't have any permissions even to view it. But I see it since my company uses it</li>
  <li>Azure Active Directory with me as Global Admin (my-ad-name). Created by me for testing purposes</li>
  <li>Access Control Services. Created by me for testing purposes</li>
  </ul>
  
  <p>So following the article <a href="https://technet.microsoft.com/en-us/library/dn635311.aspx" rel="nofollow">Using Microsoft Azure Active Directory for SharePoint 2013 authentication</a> i get error</p>
  
  <pre><code>PS C:\Users\tu1&gt; New-MsolServicePrincipal -ServicePrincipalNames @("https://my-ad-name.accesscontrol.windo
  ws.net/") -DisplayName "Test ACS Namespace" -Addresses $replyUrl
  The following symmetric key was created as one was not supplied m2XQJAeUKEQztjn/sEDJwy8TbG8jPxpw6cemkm8Fnkw=
  New-MsolServicePrincipal : Access Denied. You do not have permissions to call this cmdlet.
  At line:1 char:1
  + New-MsolServicePrincipal -ServicePrincipalNames @("https://my-ad-name.accesscon ...
  + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + CategoryInfo          : OperationStopped: (:) [New-MsolServicePrincipal], MicrosoftOnlineException
      + FullyQualifiedErrorId : Microsoft.Online.Administration.Automation.AccessDeniedException,Microsoft.Online.Admini
     stration.Automation.NewServicePrincipal
  </code></pre>
  
  <p>May that be because of the Azure AD that I don't have rights on? Are there ways to connect Access Control Service only with the AD i need?</p>