fix: rotate_secret.py use interactive auth with role guard, output CLIENT_SECRET= for .env

Author: vgrem

examples/entraid/applications/rotate_secret.py

@@ -9,17 +9,22 @@
 https://learn.microsoft.com/en-us/graph/api/application-addpassword
 """
 
+import sys
+
+from office365.directory.permissions.guard import has_role
 from office365.graph_client import GraphClient
-from tests import test_client_id, test_client_secret, test_tenant
+from tests import test_admin_principal_name, test_client_id, test_tenant
 
 
 def main():
-    client = GraphClient(tenant=test_tenant).with_client_secret(test_client_id, test_client_secret)
+    client = GraphClient(tenant=test_tenant).with_token_interactive(test_client_id, test_admin_principal_name)
+    if not has_role(client, "Global Administrator", "Privileged Role Administrator"):
+        print("Need Global Administrator or Privileged Role Administrator role to grant permissions.")
+        sys.exit(1)
 
     app = client.applications.get_by_app_id(test_client_id)
     result = app.add_password("Rotated secret").execute_query()
-
-    print(f"{app.display_name or app.app_id}: {result.value.secretText}")
+    print(f"CLIENT_SECRET={result.value.secretText}")
 
 
 if __name__ == "__main__":