Managing OAuth Permission Grants

Quiz covering Microsoft Entra Application Access and Managed Identities

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which type of OAuth 2.0 permission should be used when an application needs to access a web API as the signed-in user?

2. 2

   An organization wants to restrict users from consenting to third-party applications unless the application is from a verified publisher and the requested permissions are classified as 'low impact'. Which configuration in Microsoft Entra ID facilitates this?

3. 3

   A developer is building a background service that runs on a server without any user interaction. The service needs to read all user profiles in the directory via Microsoft Graph. Which permission type and consent method are required?

4. 4

   When an administrator clicks 'Grant admin consent for [Tenant]' in the App Registrations portal, what is the primary technical outcome?

5. 5

   You are using a System-Assigned Managed Identity for an Azure Logic App to send emails via Microsoft Graph. Since Managed Identities do not have a 'Request API Permissions' UI like standard App Registrations, how do you grant the 'Mail.Send' Application permission to the identity?