– You administer an Azure Active Directory (Azure AD) tenant.
– You add a custom application to the tenant.
The application must be able to:
– Read data from the tenant directly.
– Write data to the tenant on behalf of a user.
In the table below, identify the permission that must be granted to the application. Make only one selection in each column.