Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft SC-300 Exam - Topic 1 Question 123 Discussion

You have an Azure Active Directory (Azure AD) tenant.For the tenant. Users can register applications Is set to No.A user named Admin1 must deploy a new cloud app named App1.You need to ensure that Admin1 can register App1 in Azure AD. The solution must use the principle of least privilege.Which role should you assign to Admin1?
A) Application developer in Azure AD
B) App Configuration Data Owner for Subscription1
C) Managed Application Contributor for Subscription1
D) Cloud application administrator in Azure AD

Microsoft SC-300 Exam - Topic 1 Question 123 Discussion

Actual exam question for Microsoft's SC-300 exam
Question #: 123
Topic #: 1
[All SC-300 Questions]

You have an Azure Active Directory (Azure AD) tenant.

For the tenant. Users can register applications Is set to No.

A user named Admin1 must deploy a new cloud app named App1.

You need to ensure that Admin1 can register App1 in Azure AD. The solution must use the principle of least privilege.

Which role should you assign to Admin1?

Show Suggested Answer Hide Answer
Suggested Answer: A

https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles

by Winfred at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Tamra
25 days ago
I’m leaning towards A. It allows for app registration without too many permissions.
upvoted 0 times
...
Nguyet
2 months ago
D is definitely the best choice. Admin1 needs to register an app, so it makes sense.
upvoted 0 times
...
Titus
3 months ago
I agree, but A could work too. Application developer has some permissions.
upvoted 0 times
...
Emmett
3 months ago
I think the answer is D. Cloud application administrator. It fits the least privilege principle.
upvoted 0 times
...
Ria
3 months ago
I disagree, Managed Application Contributor could also work.
upvoted 0 times
...
Kayleigh
3 months ago
Definitely D, anything else won't work.
upvoted 0 times
...
Thurman
3 months ago
Surprised that they can't register apps with that setting!
upvoted 0 times
...
Slyvia
3 months ago
I think Application developer is enough, right?
upvoted 0 times
...
Javier
4 months ago
Admin1 needs the Cloud application administrator role for sure.
upvoted 0 times
...
Evangelina
4 months ago
Haha, I bet Admin1 is just itching to get that new app registered. D. Cloud application administrator is the way to go!
upvoted 0 times
...
Curt
4 months ago
A. Application developer is the way to go. Gotta love that principle of least privilege!
upvoted 0 times
...
Gregoria
4 months ago
D. Cloud application administrator - sounds like the perfect fit for this scenario.
upvoted 0 times
...
Lindsey
4 months ago
Hmm, I'd go with A. Application developer. Keeps things simple and secure.
upvoted 0 times
...
Bobbie
5 months ago
D. Cloud application administrator is the best option to ensure Admin1 can register the new app.
upvoted 0 times
...
Jennie
5 months ago
A. Application developer in Azure AD is the way to go. Gives Admin1 the least privilege needed.
upvoted 0 times
...
Dortha
5 months ago
D. Cloud application administrator in Azure AD seems like the right choice to me.
upvoted 0 times
...
Asha
5 months ago
I feel like the Managed Application Contributor might be too broad for just registering an app. I think we should focus on Azure AD roles.
upvoted 0 times
...
Tomoko
6 months ago
I'm a bit confused because I thought the Application developer role would allow registration too. Is that not correct?
upvoted 0 times
...
Ivette
6 months ago
I remember practicing a similar question where we had to assign roles based on least privilege. Could it be the Cloud application administrator?
upvoted 0 times
...
Monte
6 months ago
I think the role we need to assign is related to application management, but I'm not entirely sure which one fits best.
upvoted 0 times
...
Florinda
6 months ago
This is a good one. I'm pretty confident the answer is D, since that role specifically deals with app registration in Azure AD, which is what the question is asking about. The other choices seem too broad or not directly relevant.
upvoted 0 times
...
Ernie
6 months ago
Alright, I think I've got it. The key is to give Admin1 the least amount of privilege needed to register the app. Based on the information provided, option D - Cloud application administrator in Azure AD - seems like the best choice to meet the requirements.
upvoted 0 times
...
Junita
6 months ago
I'm a bit confused here. The question mentions Azure AD and a cloud app, but the answer choices include some subscription-level roles. I'll need to make sure I understand the relationship between the tenant, the subscription, and the app registration process.
upvoted 0 times
...
Fernanda
7 months ago
Okay, let's see. The question says users can't register apps by default, so I'm guessing we need to give Admin1 some kind of app registration permission. I'm leaning towards option D, but I'll double-check the other choices just to be sure.
upvoted 0 times
...
Naomi
7 months ago
Hmm, this seems like a tricky one. I'll need to think carefully about the principle of least privilege and which role would give Admin1 the minimum permissions needed to register the app.
upvoted 0 times
Art
9 days ago
True, but we want to limit permissions. D is safer for least privilege.
upvoted 0 times
...
France
15 days ago
But isn’t option A also a good choice? Developers usually have what they need.
upvoted 0 times
...
Niesha
20 days ago
I think option D makes sense. It gives specific permissions for app registration.
upvoted 0 times
...
...

Save Cancel