Exam SC-300 topic 3 question 8 discussion

Actual exam question from Microsoft's SC-300

Question #: 8
Topic #: 3

You have an Azure Active Directory (Azure AD) tenant.
For the tenant, Users can register applications is set to No.
A user named Admin1 must deploy a new cloud app named App1.
You need to ensure that Admin1 can register App1 in Azure AD. The solution must use the principle of least privilege.
Which role should you assign to Admin1?

A. Managed Application Contributor for Subscription1.
B. Application developer in Azure AD.
C. Cloud application administrator in Azure AD.
D. App Configuration Data Owner for Subscription1.

Show Suggested Answer

Suggested Answer: B 🗳️

by krustyk at June 3, 2021, 4:41 p.m.

Comments

Submit Cancel

abovedalimit

Highly Voted 3 years ago

Correct and this provides the least access to register the app

upvoted 16 times

tatendazw

2 years, 9 months ago

Name: Application developer Description: Users in this role will continue to be able to register app registrations even if the Global Admin has turned off the tenant level switch for "Users can register apps".

upvoted 15 times

...

melatocaroca

Highly Voted 3 years ago

Application Developer Can create application registrations independent of the 'Users can register applications' setting. https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

upvoted 5 times

...

Obi_Wan_Jacoby

Most Recent 3 months, 2 weeks ago

Selected Answer: B

Correct Answer B: Application developer

upvoted 1 times

...

sherifhamed

10 months, 1 week ago

Selected Answer: B

B. Application developer in Azure AD. This role grants the necessary permissions to create and manage Azure AD applications without overly broad permissions.

upvoted 1 times

...