nerdexam
Microsoft

SC-300 · Question #264

You have an Azure subscription that contains a user named User1. The App registration settings for the Azure AD tenant are configured as shown in the following exhibit. User1 builds an ASP.NET web…

The correct answer is A. Application Developer. Assign the Application Developer role to grant the ability to create application registrations when the Users can register applications setting is set to No. This role also grants permission to consent on one's own behalf when the Users can consent to apps accessing company…

Submitted by saadiq_pk· Mar 6, 2026Implement access management for apps

Question

You have an Azure subscription that contains a user named User1. The App registration settings for the Azure AD tenant are configured as shown in the following exhibit. User1 builds an ASP.NET web app named App1. You need to ensure that User1 can register App1. The solution must use the principle of least privilege. Which role should you assign to User1?

Exhibit

SC-300 question #264 exhibit

Options

  • AApplication Developer
  • BCloud App Security Administrator
  • CCloud Application Administrator
  • DApplication Administrator

How the community answered

(33 responses)
  • A
    73% (24)
  • B
    9% (3)
  • C
    15% (5)
  • D
    3% (1)

Explanation

Assign the Application Developer role to grant the ability to create application registrations when the Users can register applications setting is set to No. This role also grants permission to consent on one's own behalf when the Users can consent to apps accessing company data on their behalf setting is set to No. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-app- roles#grant-individual-permissions-to-create-and-consent-to-applications-when-the-default-ability-

Topics

#app registration#Application Developer role#least privilege#Azure AD roles

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice