nerdexam
Microsoft

SC-300 · Question #64

You have an Azure Active Directory (Azure AD) tenant. For the tenant, Users can register applications is set to No. A user named Admin1 must deploy a new cloud app named App1. You need to ensure…

The correct answer is B. Application developer in Azure AD. Application Developer can create application registrations independent of the 'Users can register applications' setting. https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

Submitted by naveen.iyer· Mar 6, 2026Implement access management for apps

Question

You have an Azure Active Directory (Azure AD) tenant. For the tenant, Users can register applications is set to No. A user named Admin1 must deploy a new cloud app named App1. You need to ensure that Admin1 can register App1 in Azure AD. The solution must use the principle of least privilege. Which role should you assign to Admin1?

Options

  • AManaged Application Contributor for Subscription1.
  • BApplication developer in Azure AD.
  • CCloud application administrator in Azure AD.
  • DApp Configuration Data Owner for Subscription1.

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    81% (21)
  • C
    8% (2)
  • D
    8% (2)

Explanation

Application Developer can create application registrations independent of the 'Users can register applications' setting. https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

Topics

#app registration#Application developer role#least privilege#RBAC

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice