From the course: Microsoft Identity and Access Administrator Associate (SC-300) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Configure and manage user and admin consent

Configure and manage user and admin consent

- [Instructor] The idea here is your development team is making a line of business application that uses Azure AD authentication. So we'll create what's called an app registration within our Entra ID tenant, and then, from there, you have the question of access. That is to say, let's imagine that the web application allowed a user to upload a file, and you wanted that file to land in a blob container in Azure storage. Do you want the app to pass through the user's own credential, or do you want the app to request a token on its own behalf? You see what I mean? So you want to think about that level of access. Probably in that example, I would go with app access rather than delegated access because the app would obtain a token to place the files in the blob container under its own access token, regardless of the currently signed-on user; you see what I mean? Bottom line is, as Entra ID administrators, we can…

Contents