MS-600 · Question #7
You have a single-page application (SPA) named TodoListSPA and a server-based web app named TodoListService. The permissions for the TodoList SPA API are configured as shown in the TodoList SPA…
The correct answer is A. the Sites.Read.All delegated permission for TodoListService. A client application gains access to a resource server by declaring permission requests. Two types are available: "Delegated" permissions, which specify scope-based access using delegated authorization from the signed-in resource owner, are presented to the resource at run-time…
Question
You have a single-page application (SPA) named TodoListSPA and a server-based web app named TodoListService. The permissions for the TodoList SPA API are configured as shown in the TodoList SPA exhibit. The permissions for the TodoListService API are configured as shown in the TodoListService exhibit. You need to ensure that TodoListService can access a Microsoft OneDrive file of the signed-in user. The solution must use the principle of least privilege. Which permission should to grant?
Exhibits
Options
- Athe Sites.Read.All delegated permission for TodoListService
- Bthe Sites.Read.All delegated permission for TodoListSpa
- Cthe Sites.Read.All application permission for TodoListSPA
- Dthe Sites.Read.All application permission for TodoListService
How the community answered
(37 responses)- A73% (27)
- B14% (5)
- C5% (2)
- D8% (3)
Explanation
A client application gains access to a resource server by declaring permission requests. Two types are available: "Delegated" permissions, which specify scope-based access using delegated authorization from the signed-in resource owner, are presented to the resource at run-time as "scp" claims in the client's access token. "Application" permissions, which specify role-based access using the client application's credentials/ identity, are presented to the resource at run-time as "roles" claims in the client's glossary#permissions
Topics
Community Discussion
No community discussion yet for this question.