Microsoft Azure Developer Associate AZ-204 Practice Question
You are developing a C# Azure Function that is enabled for a system-assigned managed identity. The function must use the Microsoft Graph SDK to retrieve the members of any security group in your tenant. The call is performed without user interaction. You add the managed identity as an Enterprise Application in Microsoft Entra ID and must grant the minimum Microsoft Graph permission required. Which permission should you assign to the managed identity?
Because the Azure Function calls Microsoft Graph with its own identity and no user is present, it uses the application context. To read the membership of any security group across the directory you need an application permission, not a delegated one. GroupMember.Read.All (application) allows an app to list the members of all groups, which is sufficient and grants fewer rights than the broader Group.Read.All permission. Delegated permissions are not usable without a signed-in user, so those options will fail.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between delegated permission and application permission in Microsoft Entra ID?
Open an interactive chat with Bash
What is the role of managed identity in Azure Functions?
Open an interactive chat with Bash
Why is GroupMember.Read.All permission specifically required for the Azure Function using Microsoft Graph?
Open an interactive chat with Bash
Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .