Application developer vs cloud application administrator

[avrohomdu]

It would be so much easier if questions had IDs so I can reference the ID instead of pasting the whole question.

This question

“Category: SC-300 – Implement and Manage User Identities

Your organization manages identities in a Microsoft Entra tenant and strictly adheres to the principle of least privilege when assigning roles in Microsoft Entra ID.

A developer must register applications, configure API permissions, and manage credentials. However, this user should not be given unnecessary administrative rights over users, groups, or other tenant-wide settings.

Which Microsoft Entra ID role should you assign to meet these requirements?”

The given answer is application developer, but application developer does not have access to configure API permissions.

This is all that role has access to

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#application-developer

[Nikee-TutorialsDojo]

Hi Avrohom,

Thank you for the thorough feedback—we really appreciate you taking the time to point this out.

You raise a valid concern regarding the Application Developer role and its limitations, particularly around configuring API permissions that may require admin-level consent.

We’ve noted this and will review the question and explanation to ensure they accurately reflect the correct role based on the requirements.

Thanks again for your valuable input!

Regards,
Nikee @ Tutorials Dojo