Managing OAuth Permission Grants

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Microsoft Entra Application Access and Managed Identities

What you'll be asked

  1. Which type of OAuth 2.0 permission should be used when an application needs to access a web API as the signed-in user?
  2. An organization wants to restrict users from consenting to third-party applications unless the application is from a verified publisher and the requested permissions are classified as 'low impact'. Which configuration in Microsoft Entra ID facilitates this?
  3. A developer is building a background service that runs on a server without any user interaction. The service needs to read all user profiles in the directory via Microsoft Graph. Which permission type and consent method are required?
  4. When an administrator clicks 'Grant admin consent for [Tenant]' in the App Registrations portal, what is the primary technical outcome?
  5. You are using a System-Assigned Managed Identity for an Azure Logic App to send emails via Microsoft Graph. Since Managed Identities do not have a 'Request API Permissions' UI like standard App Registrations, how do you grant the 'Mail.Send' Application permission to the identity?

Answers and explanations come after you submit.