SC-300 · Question #264
SC-300 Question #264: Real Exam Question with Answer & Explanation
The correct answer is A: Application Developer. Assign the Application Developer role to grant the ability to create application registrations when the Users can register applications setting is set to No. This role also grants permission to consent on one's own behalf when the Users can consent to apps accessing company data
Question
You have an Azure subscription that contains a user named User1. The App registration settings for the Azure AD tenant are configured as shown in the following exhibit. User1 builds an ASP.NET web app named App1. You need to ensure that User1 can register App1. The solution must use the principle of least privilege. Which role should you assign to User1?
Options
- AApplication Developer
- BCloud App Security Administrator
- CCloud Application Administrator
- DApplication Administrator
Explanation
Assign the Application Developer role to grant the ability to create application registrations when the Users can register applications setting is set to No. This role also grants permission to consent on one's own behalf when the Users can consent to apps accessing company data on their behalf setting is set to No. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-app- roles#grant-individual-permissions-to-create-and-consent-to-applications-when-the-default-ability-
Community Discussion
No community discussion yet for this question.