get_spn_app_id_and_obj_id.yml

steps:
- task: AzureCLI@2
  name: getSpnDetails
  inputs:
    azureSubscription: ${{parameters.AzureDevOpsServiceConnection}}
    scriptType: pscore
    scriptLocation: inlineScript
    addSpnToEnvironment: true
    inlineScript: |
      Write-Host "##vso[task.setvariable variable=serviceConnectionClientId;secret]$($env:servicePrincipalId)"
      Write-Host "##vso[task.setvariable variable=serviceConnectionObjectId;secret]$(az ad sp show --id $env:servicePrincipalId --query id --output tsv)"

Use Client ID / App ID / SPN ID to authenticate
Use Object ID to assign RBAC