Developing Solutions for Microsoft Azure — Question 60

You develop applications that integrate with a Microsoft Entra tenant.

You plan to implement a permission classification in the tenant.

You need to select permissions to include in your classification.

Which permissions should you select?

Answer options

• A. app-only access permissions that require admin consent
• B. delegated permissions that require only user consent
• C. app-only access permissions that require only user consent
• D. delegated permissions that require admin consent

Correct answer: B

Explanation

The correct choice is B because delegated permissions that require only user consent allow users to grant access to their data without needing admin approval, making them suitable for end-user applications. Options A and D require admin consent, which can hinder user experience and impede application deployment. Option C involves app-only permissions that don't necessitate user interaction, which is not ideal for this classification.