MS-600 · Question #184
You are building an app that will use the Microsoft Graph API and the Microsoft identity platform to enable users to perform the following tasks: - Sign in to Azure Active Directory (Azure AD)…
The correct answer is D. User.Read delegated, Group.Read delegated, and Mail.Send delegated permissions. Microsoft Graph API mail.send delegated permission is less privileged than mail.send application The same is true for Group.Read delegated compared to Group Read application. https://docs.microsoft.com/en-us/graph/api/user-sendmail?view=graph-rest-1.0&tabs=http…
Question
You are building an app that will use the Microsoft Graph API and the Microsoft identity platform to enable users to perform the following tasks:
- Sign in to Azure Active Directory (Azure AD).
- View all the Microsoft 365 groups that they own.
Each week, the app will also email the users a list of the Microsoft 365 groups to which they belong. You need to identify which permissions to assign to the app. The solution must use the principle of least privilege. What should you identify?
Options
- AUser.Read delegated, Group.Read delegated, Group.Read application, and Mail.Send application
- BUser.Read delegated, Group.Read application, and Mail.Send delegated permissions
- CUser.Read delegated, User.Read application, Group.Read application, and Mail.Send application
- DUser.Read delegated, Group.Read delegated, and Mail.Send delegated permissions
How the community answered
(50 responses)- A4% (2)
- B16% (8)
- C8% (4)
- D72% (36)
Explanation
Microsoft Graph API mail.send delegated permission is less privileged than mail.send application The same is true for Group.Read delegated compared to Group Read application. https://docs.microsoft.com/en-us/graph/api/user-sendmail?view=graph-rest-1.0&tabs=http https://docs.microsoft.com/en-us/graph/permissions-reference
Topics
Community Discussion
No community discussion yet for this question.