Your web app uses the Microsoft identity platform to authenticate users and calls multiple REST APIs. One API must read the user's calendar and the app needs permission to send mail as the user. Which OAuth/OpenID Connect parameter should you request to obtain these permissions?
Choose an answer
Tap an option to check your answer.
Correct answer: scope.
Why this is the answer
The scope parameter is used in OAuth 2.0 and OpenID Connect to specify the permissions (or "scopes") that an application is requesting from the user. In this scenario, the app needs permissions to read the user's calendar and send mail as the user, which are defined as specific scopes (e.g., Calendars.Read, Mail.Send). The authorization server will present these requested permissions to the user for consent. tenant specifies the Azure AD tenant for authentication. codechallenge is used in the PKCE flow for enhanced security. state is used to maintain state between the request and callback to prevent CSRF attacks. clientid identifies the application making the request. None of these parameters are used to request specific API permissions.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed