Microsoft Identity and Access Administrator — Question 113

You have a Microsoft 365 subscription.

You need to ensure that users can grant enterprise applications access to their profile. The solution must ensure that the users can consent only to the User.Read and profile delegated permissions.

What should you configure first?

Answer options

• A. Identity Protection settings
• B. Permission classifications
• C. Admin consent settings
• D. Security defaults

Correct answer: B

Explanation

The correct answer is B, as configuring permission classifications is essential for defining what users can consent to regarding delegated permissions. Options A and D relate to overall security management, while C focuses on broader admin consent, which does not specifically limit user permissions to User.Read and profile.