Exam AZ-500 topic 3 question 54 discussion

# Create the Azure AD application serverApplicationId=$(az ad app create \ --display-name "${aksname}Server" \ --identifier-uris "https://${aksname}Server" \ --query appId -o tsv) # Update the application group membership claims az ad app update --id $serverApplicationId --set groupMembershipClaims=All

### IN EXAM ### 29/6/2021

C. groupMembershipClaims

C is the answer. https://learn.microsoft.com/en-us/azure/aks/azure-ad-integration-cli#create-azure-ad-server-component To integrate with AKS, you create and use an Azure AD application that acts as an endpoint for the identity requests. The first Azure AD application you need gets Azure AD group membership for a user. Create the server application component using the az ad app create command, then update the group membership claims using the az ad app update command. # Update the application group membership claims az ad app update --id $serverApplicationId --set groupMembershipClaims=All

C. groupMembershipClaims outdated

The question is outdated. Reference Integrate Azure Active Directory with Azure Kubernetes Service using the Azure CLI (legacy) https://learn.microsoft.com/en-us/azure/aks/azure-ad-integration-cli **The feature described in this document, Azure AD Integration (legacy), will be deprecated on June 1st, 2023. AKS has a new improved AKS-managed Azure AD experience that doesn't require you to manage server or client application

Select Manifest, and then edit the groupMembershipClaims: value as "All". When you're finished with the updates, select Save.

answer correct

groupMembershipClaims should be set to "All"