Microsoft Graph · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A signed-in user uses an ASP.NET Core web application to read their own Microsoft Graph profile through the /me endpoint. Which permission and author…
Practice question from Microsoft Graph (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
easy · MCQ · Q-59C45D
A signed-in user uses an ASP.NET Core web application to read their own Microsoft Graph profile through the /me endpoint. Which permission and authorization approach is appropriate?
- A.Delegated User.Read permission obtained through an interactive sign-in flowCorrect answer
- B.Application User.Read.All permission obtained through the client credentials flow
- C.Delegated Mail.Read permission obtained through an interactive sign-in flow
- D.Application Directory.ReadWrite.All permission obtained through the client credentials flow
Solution
The /me endpoint operates in the context of the signed-in user, so the application should use delegated permissions. User.Read is the least-privileged permission needed to read the signed-in user's basic profile.
More from Microsoft Graph
- A background .NET worker uses Microsoft Graph to list all users in a tenant. It runs without a signed-in user and uses the client credentia…
- A single-page application calls a protected middle-tier API with an access token. The middle tier must call the Microsoft Graph /me endpoin…
- A mobile application allows a signed-in employee to view the employee's upcoming calendar events. The application does not need to access c…
- An Azure Function runs nightly without a signed-in user and uses the Microsoft Graph .NET SDK with a service principal. The required Micros…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed