Exam MS-600 topic 3 question 15 discussion

Actual exam question from Microsoft's MS-600

Question #: 15
Topic #: 3

You have a line-of-business API that is secured by using Azure Active Directory (Azure AD).
You deploy a solution to the app catalog. The solution requests permission to the API.
What should you do in the SharePoint admin center to ensure that the solution can access the API?

A. Create a SharePoint security group and add the solution
B. Create an access policy
C. Enable sandbox solutions
D. Approve a pending permission request

Show Suggested Answer

Suggested Answer: D 🗳️
Developers building a SharePoint Framework solution that requires access to specific resources secured with Azure AD list these resources along with the required permission scopes in the solution manifest. When deploying the solution package to the app catalog, SharePoint creates permission requests and prompts the administrator to manage the requested permissions. For each requested permission, tenant administrators can decide whether they want to grant or deny the specific permission.
All permissions are granted to the whole tenant and not to a specific application that has requested them. When the tenant administrator grants a specific permission, it is added to the SharePoint Online Client Extensibility Azure AD application, which is provisioned by Microsoft in every Azure AD and which is used by the SharePoint Framework in the OAuth flow to provide solutions with valid access tokens.

by DPWebs at Dec. 21, 2021, 6:52 p.m.

Comments

Submit Cancel

tfulanchan

10 months, 2 weeks ago

https://learn.microsoft.com/en-us/graph/security-authorization

upvoted 1 times

...

DPWebs

2 years ago

Correct answer is D, submitted permission request has to be approved

upvoted 2 times

...