Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
Your company is developing an application. This application is currently registered in Azure AD. You have to ensure that the application can access secrets in Azure key vault on behalf of the application user. How should you configure the application access in Azure AD?
A. Application permission without admin consent
B. Application permission that requires admin consent
C. Delegated permission without admin consent
D. Delegated permission that requires admin consent
Answer – C
Between “Application Permissions” and “Delegated Permissions”, you have to choose “Delegated Permissions”, because this can be done on behalf of the user.
The user would need to be granted access to the key vault service in advance.
Options A and B are incorrect because the Microsoft documentation clearly mentions to make use of Delegated permissions.
Option D is incorrect since admin consent would be required if the user needs elevated access to resources.
For more information on configuring application access, one can visit the below URL-
Comments are closed, but trackbacks and pingbacks are open.