Microsoft Identity and Access Administrator — Question 131

You have a Microsoft 365 subscription.

You plan to deploy an app named App1 that will have the following configurations:

• Will be registered in Microsoft Entra
• Will access the signed-in user's Microsoft Outlook calendar by using the Microsoft Graph API

You need to ensure that App1 can access Microsoft Graph.

What should you use?

Answer options

• A. application permissions
• B. delegated permissions
• C. a custom role-based access control (RBAC) role
• D. a built-in role-based access control (RBAC) role

Correct answer: B

Explanation

The correct answer is B, as delegated permissions allow an application to act on behalf of a user, which is necessary for accessing the user's Outlook calendar via the Microsoft Graph API. Application permissions (A) would not work here since they grant access without user context, while custom (C) and built-in (D) RBAC roles are not directly applicable for this scenario involving user-specific access.