MS-600 · Question #84
You have an application named App1 that is used to administer an Azure Active Directory (Azure AD) tenant. When administrators install App1, they are prompted for admin consent. Which application…
The correct answer is A. RoleManagement.ReadWrite.Directory. By default, all users are allowed to consent to applications for permissions that don't require administrator consent. For example, by default, a user can consent to allow an app to access their mailbox but can't consent to allow an app unfettered access to read and write to…
Question
You have an application named App1 that is used to administer an Azure Active Directory (Azure AD) tenant. When administrators install App1, they are prompted for admin consent. Which application permission can cause the administrators to be prompted for consent?
Options
- ARoleManagement.ReadWrite.Directory
- BCalendars.ReadWrite
- CDevice.Read
- DCalendars.ReadWrite.Shared
How the community answered
(27 responses)- A74% (20)
- B7% (2)
- C15% (4)
- D4% (1)
Explanation
By default, all users are allowed to consent to applications for permissions that don't require administrator consent. For example, by default, a user can consent to allow an app to access their mailbox but can't consent to allow an app unfettered access to read and write to all files in your organization. https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-user-consent
Topics
Community Discussion
No community discussion yet for this question.