Exam AZ-500 topic 2 question 42 discussion

Granting tenant-wide admin consent requires you to sign in as Global Administrator, an Application Administrator, or a Cloud Application Administrator.

in exam

Answer: 1. B, Cloud application administrator 2. C, Application administrator 1. The Cloud application administrator role has permissions to create and manage all aspects of enterprise applications, application registrations, and application proxy settings. Most importantly, this role can grant admin consent for delegated permissions and application permissions, which is exactly what's needed for User1. 2. The Application administrator role has similar permissions to the Cloud application administrator. It can manage all aspects of applications and service principals, including the ability to grant admin consent for the tenant, which matches the requirement for User1. Reference: 1. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#cloud-application-administrator 2. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#application-administrator

on exam BC 13/04/24

On exam 1/2/24

To grant tenant-wide admin consent, you need: A Microsoft Entra user account with *one of the following roles*: Global Administrator or Privileged Role Administrator, for granting consent for apps requesting any permission, for any API. Cloud Application Administrator or Application Administrator, for granting consent for apps requesting any permission for any API, except Microsoft Graph app roles (application permissions). A custom directory role that includes the permission to grant permissions to applications, for the permissions required by the application. https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal#prerequisites

In exam 13 Oct

On exam 7/8/23. A bit different answers to choose from.

Cloud APPLICATION Administrator APPLICATION Administrator

https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent?pivots=portal#:~:text=An%20Azure%20AD,by%20the%20application.

B. Cloud application administrator C. Application administrator

BC is the answer. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent?pivots=portal#prerequisites Granting tenant-wide admin consent requires you to sign in as a user that is authorized to consent on behalf of the organization. To grant tenant-wide admin consent, you need: An Azure AD user account with one of the following roles: - Global Administrator or Privileged Role Administrator, for granting consent for apps requesting any permission, for any API. - Cloud Application Administrator or Application Administrator, for granting consent for apps requesting any permission for any API, except Azure AD Graph or Microsoft Graph app roles (application permissions). - A custom directory role that includes the permission to grant permissions to applications, for the permissions required by the application.

Exam.6 case studies. 3 true/false questions. 47 multiple questions and no simulations. Alot of new questions thats not up here

In Exam April 11, 2023

B. Cloud application administrator C. Application administrator

In exam 29/01/2023 + many questions about Microsoft Sentinel

On my exam today: 20-7-2022