You are developing a multi-tenant web application that will be used by other organizations. The application requires delegated access to Microsoft Graph. You need to configure the application registration and ensure that a customer's tenant administrator can consent to the application and assign users to it.
Which sequence of actions should you perform? To answer, move all actions from the list of actions to the active area and arrange them in the correct order.
- 1Register the application in your home Microsoft Entra ID tenant and configure it as multi-tenant.
- 2Configure the required delegated API permissions for Microsoft Graph in the application registration.
- 3Direct the customer's tenant administrator to the admin consent endpoint to grant tenant-wide consent.
- 4Assign users or groups to the enterprise application (service principal) within the customer's Microsoft Entra ID tenant.
Answer
The correct sequence is to register the application as multi-tenant, configure the delegated API permissions, direct the customer's tenant administrator to grant consent to instantiate the service principal, and finally assign users or groups to the service principal in the customer's tenant.
The correct sequence begins by registering the application as multi-tenant to establish its identity. Next, the developer defines the required delegated API permissions on the application registration. After deployment, the customer's administrator must grant consent, which instantiates the service principal in the customer's tenant. Only after the service principal exists can the customer administrator assign users or groups to it.
Step-by-Step Solution
Key Concept
Multi-tenant application registration, consent flow, and service principal instantiation
Estimated Time:2m 0s