You have hired a new Azure Engineer that will be responsible for managing all aspects of enterprise applications and app registrations. This engineer will not need to manage anything application…

Question

Options

• AGlobal Administrator
• BApplication Administrator
• CCloud Application Administrator
• DEnterprise Administrator

• A
  8% (3)
• B
  3% (1)
• C
  73% (29)
• D
  18% (7)

Explanation

Cloud Application Administrator is the correct choice because this role grants full permissions to manage enterprise applications and app registrations, while specifically excluding Application Proxy management - perfectly aligning with the principle of least privilege for this scenario.

Why the others are wrong:

• A. Global Administrator has unrestricted access to all Azure AD features, which violates least privilege and is far more than needed.
• B. Application Administrator is similar but includes Application Proxy permissions, giving the engineer more access than required.
• D. Enterprise Administrator is not a valid Azure AD built-in role, making it a fabricated distractor.

Memory Tip: Think of it this way - Cloud Application Administrator = Application Administrator minus the Proxy. The word "Cloud" is the hint that this role lives entirely in the cloud, with no on-premises Application Proxy component. Whenever a question removes proxy responsibilities, move up to the "Cloud" variant to cut down the permissions.

No community discussion yet for this question.