Skip to Content

AZ-500: Empower App1 to Manage Calendars with Least Privilege in Azure

Learn how to enhance App1’s permissions to read user calendars and create appointments while adhering to the principle of least privilege. Follow our step-by-step guide for effective Azure app registration configuration.

Question

You have an Azure subscription that contains an app named App1. App1 has the app registration shown in the following table.

API Permisssion Type Admin consent required Status
Microsoft.Graph User.Read Delegated No None
Microsoft.Graph Calendars.Read Delegated No None

You need to ensure that App1 can read all user calendars and create appointments. The solution must use the principle of least privilege.
What should you do?

A. Add a new Delegated API permission for Microsoft.Graph Calendars.ReadWrite.
B. Add a new Application API permission for Microsoft.Graph Calendars.ReadWrite.
C. Select Grant admin consent.
D. Add a new Delegated API permission for Microsoft.Graph Calendars.ReadWrite.Shared.

Answer

A. Add a new Delegated API permission for Microsoft.Graph Calendars.ReadWrite.

Microsoft Certified Azure Security Engineer Associate AZ-500 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft Certified Azure Security Engineer Associate AZ-500 exam and earn Microsoft Certified Azure Security Engineer Associate AZ-500 certification.