QuestionQ2

Manage identity, access, and governance

You have a Microsoft Entra tenant with the following configurations:

  • User consent for applications is disabled.
  • Only administrators can grant permissions to applications.

You register an application named App1 that uses delegated Microsoft Graph permissions.

You need to configure App1 to meet the following requirements:

  • Enable user sign-ins without interactive consent prompts.
  • Enable App1 to access Microsoft Graph on behalf of the signed-in user.

What should you do?

Explanation

Delegated permissions allow an application to access Microsoft Graph on behalf of the signed-in user. When user consent is disabled, an administrator must grant consent; granting tenant-wide admin consent to the required delegated permissions lets users sign in without being prompted to consent.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!