Microsoft Azure Security Technologies (AZ-500)

When deploying an application that modifies Azure AD user properties, what is the first configuration step needed?

1. Implementing a custom role-based access control (RBAC) role

2. Configuring Azure AD Application Proxy

3. Creating an app registration

4. Setting up an external identity

The correct answer is: Creating an app registration

When deploying an application that modifies Azure Active Directory (AD) user properties, creating an app registration is the fundamental first step. An app registration in Azure AD serves as the bridge between your application and Azure AD, enabling it to authenticate and interact with Azure resources securely. Upon creating an app registration, you obtain essential details such as the application ID and create a client secret or certificate, which facilitate secure communications with Azure AD. This registration allows the application to request permissions to modify user properties and access other AD resources necessary for its operations. The process of app registration is critical because it establishes the application's identity within Azure AD and defines its permissions. By setting up this initial registration, you can subsequently configure the required API permissions to allow modifications to user properties and handle any complex scenarios involving user authentication and authorization. In contrast, implementing custom RBAC roles, configuring Azure AD Application Proxy, or setting up external identities are steps that may come later in the deployment process or may be relevant to specific use cases but are not the starting point when focusing on modifying Azure AD user properties.