Which permission should you grant for each feature?

Topic 2, Misc. Questions

HOTSPOT

You are developing an interactive invoicing application that will be used by end users.

The application will have the following features:

– Save invoices generated by a user to the user’s Microsoft OneDrive.

– Email daily automated reminders.

You need to identify which permissions to grant for the application features. The solution must use the principle of least privilege.

Which permission should you grant for each feature? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Microsoft identity platform supports two types of permissions: delegated permissions and application permissions.

Box 1: Delegated

Box 2: Application

Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent