SC-300 Certification Practice Question #190

Question

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You add an enterprise application named App1 to Azure AD and set User1 as the owner of App1. App1 requires admin consent to access Azure AD before the app can be used.

You configure the Admin consent requests settings as shown in the following exhibit.

Admin1, Admin2, Admin3, and User’ are added as reviewers.

Which users can review and approve the admin consent requests?

Accepted Answer

Being designated as a reviewer lets a user view, block, or deny admin consent requests, but only reviewers who already hold a role with permission to grant admin consent — Global Administrator, Cloud Application Administrator, or Application Administrator — can actually review and **approve**. From the role table, Admin1 (Cloud application administrator) and Admin2 (Application administrator) hold qualifying roles; Admin3 (Security administrator) does not, and User1 has no role (being the app's owner doesn't elevate privileges). Therefore only Admin1 and Admin2 can review and approve. Suggested Answer D, the top community vote (9), and the 15-👍 Highly Voted comment all align with MS Learn.

More SC-300 practice questions