You have an Azure subscription that contains a user named User1. You need to meet the following requirements: - Prevent User1 from being added as an owner of newly registered apps. - Ensure that User1 can manage the application proxy settings. - Ensure that User1 can register apps. - Use the principle of least privilege. Which role should you assign to User1?

B. Cloud application administrator

C. Service support administrator

Microsoft

SC-300 · Question #189

You have an Azure subscription that contains a user named User1. You need to meet the following requirements: - Prevent User1 from being added as an owner of newly registered apps. - Ensure that…

The correct answer is D. Application administrator. Application Administrator = Can create and manage all aspects of app registrations and enterprise apps. Cloud Application Administrator = Can create and manage all aspects of app registrations and enterprise apps except App Proxy. Service Support Administrator = Can read…

Submitted by ravi_2018· Mar 6, 2026Implement access management for apps

Question

You have an Azure subscription that contains a user named User1. You need to meet the following requirements:

Prevent User1 from being added as an owner of newly registered apps.
Ensure that User1 can manage the application proxy settings.
Ensure that User1 can register apps.
Use the principle of least privilege.

Which role should you assign to User1?

Options

AApplication developer
BCloud application administrator
CService support administrator
DApplication administrator

How the community answered

(45 responses)

A
2% (1)
B
4% (2)
C
11% (5)
D
82% (37)

Explanation

Application Administrator = Can create and manage all aspects of app registrations and enterprise apps. Cloud Application Administrator = Can create and manage all aspects of app registrations and enterprise apps except App Proxy. Service Support Administrator = Can read service health information and manage support tickets. Application Developer = Can create application registrations independent of the 'Users can register applications' setting. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

Topics

#Application Administrator role#app proxy settings#app registration#principle of least privilege

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice