When an [[Application Registration]] is completed, you will have a *globally unique* instance of the Application Object which lives within your home [[Tenant]]. This object acts as a template where you can configure various things like [[API Permissions]], [[Client Secrets]], [[Branding]], [[App Roles]]. This object establishes a trust relationship between [[Microsoft Entra ID]] and your custom application. The application object describes three aspects of an application: - How the service can issue tokens in order to access the application - The resources that the application might need to access - The actions that the application can take