ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 121 - AZ-204 discussion

Report
Export

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user's Azure AD group membership must be used to determine the permission level.

You need to configure authorization.

Solution:

Configure and use Integrated Windows Authentication in the website.

In the website, query Microsoft Graph API to load the group to which the user is a member.

Does the solution meet the goal?

A.
Yes
Answers
A.
Yes
B.
No
Answers
B.
No
Suggested answer: B

Explanation:

Microsoft Graph is a RESTful web API that enables you to access Microsoft Cloud service resources.

Instead in the Azure AD application's manifest, set value of the groupMembershipClaims option to All. In the website, use the value of the groups claim from the JWT for the user to determine permissions.

Reference:

https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

asked 02/10/2024
Meena Utsaha
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first