Exam AZ-500 topic 4 question 88 discussion

A is the answer. https://learn.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles#to-disable-the-default-ability-to-create-application-registrations-or-consent-to-applications On the User settings page for your organization, set the Users can register applications setting to No. This will disable the default ability for users to create application registrations.

To prevent nonprivileged Azure AD users from creating service principals in Azure AD, follow these steps: Sign in to the Azure AD admin center (Microsoft Entra admin center) as a Global Administrator. Navigate to Azure Active Directory > User settings. Under "App registrations", set "Users can register applications" to "No". This configuration restricts the ability to create service principals to users with specific privileged roles. Only users with the following roles will be able to create service principals: Application Developer Application Administrator Cloud Application Administrator Global Administrator Hybrid Identity Administrator By implementing this restriction, you ensure that only authorized users with appropriate privileges can create service principals, enhancing the security of your Azure AD environment Answer = A

Answer is A

Azure Active Directory  ”Manage”, User Settings  “App registrations”, Users can register applications  Select: No  Save

A. From the User settings blade, set Users can register applications to No.

In the Azure Active Directory admin center, you can restrict the ability of non-privileged users to create service principles by setting the "Users can register applications" option to "No" in the User settings blade. This will prevent non-privileged users from creating new applications or service principles in the Azure AD tenant, while still allowing privileged users to perform these actions if necessary.

Correct answer