SC-300 Certification Practice Question #207

Question

You have a Microsoft 365 subscription.

You plan to deploy an app named App1 that will have the following configurations:

•	Will be registered in Microsoft Entra
•	Will access the signed-in user's Microsoft Outlook calendar by using the Microsoft Graph API

You need to ensure that App1 can access Microsoft Graph.

What should you use?

Accepted Answer

The app must access *the signed-in user's* Outlook calendar via Microsoft Graph, which is the textbook definition of the delegated access scenario — the app calls Graph on behalf of the user and is bounded by that user's own permissions. MS Learn states delegated permissions (scopes) are exactly the mechanism for this, while application permissions are for app-only access without a signed-in user. The lone dissent for application permissions misreads the requirement. RBAC roles (C/D) govern access to Azure resources, not Microsoft Graph consent, so they are out of scope. Suggested Answer, a 16-vote Most Voted, multiple high-vote comments, and MS Learn all converge on B.

More SC-300 practice questions