SC-300 · Question #430
You have a Microsoft 365 subscription. You need to ensure that users can grant enterprise applications access to their profile. The solution must ensure that the users can consent only to the…
The correct answer is C. Admin consent settings. In Microsoft 365 you may need to configure Admin consent settings to control whether users can grant enterprise applications access to their profiles. By default, users can consent to applications for permissions that don't require administrator approval. However, you can…
Question
You have a Microsoft 365 subscription. You need to ensure that users can grant enterprise applications access to their profile. The solution must ensure that the users can consent only to the User.Read and profile delegated permissions. What should you configure first?
Options
- AIdentity Protection settings
- BPermission classifications
- CAdmin consent settings
- DSecurity defaults
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- C83% (25)
- D10% (3)
Explanation
In Microsoft 365 you may need to configure Admin consent settings to control whether users can grant enterprise applications access to their profiles. By default, users can consent to applications for permissions that don't require administrator approval. However, you can restrict this and require administrator consent for certain permissions or for all applications. By default, users can consent to applications for permissions that don't require admin approval. This means they can grant apps access to their profile information or other resources that don't require elevated permissions. * Admin Consent: For certain permissions, such as those requiring access to all files in the organization or other sensitive data, admin consent is required. This means that an administrator must approve the application's access to these resources. https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/user-admin-consent-overview
Topics
Community Discussion
No community discussion yet for this question.