You work for a company as an Azure administrator. There is a third party email scanning system used by the organization. The system scans email every time an email is sent to or received by…

Non-interactive enterprise applications, particularly those integrating with the tenant directory for system-level functions like email verification, rely exclusively on administrative consent for permissions. Verifying that *only* the correct and minimum necessary admin consent permissions are configured ensures the principle of least privilege is applied, minimizing potential security vulnerabilities.

Azure Security Center (now Defender for Cloud) provides broad security posture management and threat protection, but it is not the primary interface for directly viewing or configuring specific application permissions.

While permissions need configuring, specifying 'User and Admin consent permissions' is less accurate for a non-interactive application where user consent is typically irrelevant; the focus should be on administrative consent.

While you would indeed review the Enterprise Application *in* Azure Active Directory (now Microsoft Entra ID) to perform this task, 'Verify that only the correct Admin consent permissions are configured' is the specific action related to permissions, making it the more precise answer for what must be taken.