Microsoft Graph · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
An Azure Function runs nightly without a signed-in user and uses the Microsoft Graph .NET SDK with a service principal. The required Microsoft Graph…
Practice question from Microsoft Graph (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-85240E
An Azure Function runs nightly without a signed-in user and uses the Microsoft Graph .NET SDK with a service principal. The required Microsoft Graph application permissions have already been configured and admin consent has been granted. Which scope should be supplied when creating the Graph client for client-credentials authentication?
- A.User.Read
- B.https://graph.microsoft.com/.defaultCorrect answer
- C.https://login.microsoftonline.com/.default
- D.offline_access
Solution
The client-credentials flow uses the Microsoft Graph resource scope https://graph.microsoft.com/.default. Microsoft Entra ID uses this value to issue a token containing the statically configured and consented application permissions.
More from Microsoft Graph
- A signed-in user uses an ASP.NET Core web application to read their own Microsoft Graph profile through the /me endpoint. Which permission…
- A background .NET worker uses Microsoft Graph to list all users in a tenant. It runs without a signed-in user and uses the client credentia…
- A single-page application calls a protected middle-tier API with an access token. The middle tier must call the Microsoft Graph /me endpoin…
- A mobile application allows a signed-in employee to view the employee's upcoming calendar events. The application does not need to access c…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed