Microsoft
AZ-204 · Question #405
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is A. Yes. They have mentioned that the claims are for the website. group claims are at Azure AD level while role claims are at app level. since they have mentioned that the authrizations is for the website. this is the right answer and not group claims…
Submitted by cyberguy42· Mar 30, 2026Implement Azure security
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials. You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level. You need to configure authorization. Solution: - Create a new Azure AD application. In the application's manifest, define application roles that match the required permission levels for the application. - Assign the appropriate Azure AD group to each role. In the website, use the value of the roles claim from the JWT for the user to determine permissions. Does the solution meet the goal?
Options
- AYes
- BNo
How the community answered
(41 responses)- A83% (34)
- B17% (7)
Explanation
They have mentioned that the claims are for the website. group claims are at Azure AD level while role claims are at app level. since they have mentioned that the authrizations is for the website. this is the right answer and not group claims. https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-add-app-roles-in-azure-ad-
Topics
#Azure AD#MSAL#authentication#role assignment
Community Discussion
No community discussion yet for this question.