Microsoft Azure Developer Associate AZ-204 Practice Question
Your team builds a multi-tenant ASP.NET Core web API protected by the Microsoft identity platform. The API exposes a delegated permission named Inventory.Read and is called from a JavaScript single-page application (SPA). Access tokens reaching the API lack the scp claim, so all signed-in users are accepted. You must ensure tokens include the Inventory.Read scope so the API can authorize calls. What must the SPA add to its authorization request?
Add Inventory.Read to the scope parameter sent to the authorization endpoint.
Configure the SPA to use the implicit grant flow.
Include the offline_access permission together with openid.
The scp (scope) claim is included only in access tokens that are issued for delegated permissions explicitly requested with the scope parameter. By adding the Inventory.Read delegated permission value to the scope parameter of the SPA's authorization request, the Microsoft identity platform issues an access token whose scp claim contains Inventory.Read. The API can then use [Authorize("Inventory.Read")] or a custom policy to restrict access. Requesting an ID token does not carry API scopes, the offline_access permission only enables refresh tokens, and switching to the implicit grant has no effect on the claims issued.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are delegated permissions in the Microsoft identity platform?
Open an interactive chat with Bash
What is the scp (scope) claim in an access token, and why is it important?
Open an interactive chat with Bash
What is the scope parameter in an authorization request?
Open an interactive chat with Bash
Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .