You have a Microsoft Entra tenant that contains a user named User1. You have an app registration named App1. For App1, you create an app role named Role1. You need to assign User1 to Role1. What…

Question

Options

• ARoles and administrators for App1 from Enterprise applications
• BApp roles for App1 from App registrations
• CUsers and groups for App1 from Enterprise applications
• DAPI permissions for App1 from App registrations
• ERoles and administrators from the Microsoft Entra admin center

• A
  9% (5)
• B
  2% (1)
• C
  84% (46)
• D
  4% (2)
• E
  2% (1)

Explanation

Explanation

Assigning users to app roles is done through Enterprise Applications, not App Registrations - specifically via the "Users and groups" blade, which is where you map users (or groups) to the app roles you've defined. Enterprise Applications represents the service principal (the deployed instance of the app) where runtime assignments like user-to-role mappings are managed.

Why the distractors are wrong:

• A (Roles and administrators in Enterprise Applications): This section manages Microsoft Entra directory roles, not custom app roles you've created.
• B (App roles in App Registrations): This is where you define/create app roles like Role1, but you cannot assign users here.
• D (API permissions in App Registrations): This configures what APIs the app can call, completely unrelated to user role assignments.
• E (Roles and administrators from Entra admin center): This manages built-in Entra directory roles (like Global Admin), not custom application roles.

Memory Tip: Think of it this way - App Registrations = "build it" (define roles, permissions) and Enterprise Applications = "use it" (assign users, manage access). When you need to assign a user to something, always head to Enterprise Applications → Users and groups.

No community discussion yet for this question.