Microsoft
AZ-204 · Question #363
You have to develop an ASP.Net Core application. The application is used to work with blobs in an Azure storage account. The application authenticates via Azure AD credentials. Role based access has…
The correct answer is A. User.Read. For the Microsoft Graph API, we need to use the User.Read permission. Since this is clearly given in the documentation, all other options are incorrect/ https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app
Submitted by yousef_jo· Mar 30, 2026Implement Azure security
Question
You have to develop an ASP.Net Core application. The application is used to work with blobs in an Azure storage account. The application authenticates via Azure AD credentials. Role based access has been implemented on the containers that contain the blobs. These roles have been assigned to the users. You have to configure the application so that the user's permissions can be used with the Azure Blob containers. Which of the following would you use as the Permission for the Microsoft Graph API?
Exhibit
Options
- AUser.Read
- BUser.Write
- Cclient_id
- Duser_impersonation
How the community answered
(43 responses)- A74% (32)
- B7% (3)
- C2% (1)
- D16% (7)
Explanation
For the Microsoft Graph API, we need to use the User.Read permission. Since this is clearly given in the documentation, all other options are incorrect/ https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app
Topics
#Azure AD#OAuth2#user impersonation#Blob storage RBAC
Community Discussion
No community discussion yet for this question.