The AZ-500 exam retires on August 31, 2026
Its replacement is SC-500 (Microsoft Cloud and AI Security Engineer). Go to the SC-500 study guide →
2.3.1. Enterprise Application Management
💡 First Principle: Enterprise applications represent external applications (SaaS apps, custom apps) that users in your tenant can sign into. Managing them controls what applications your users can access and what data those applications can read.
Scenario: Your organization uses Salesforce and custom internal applications. You need to enable single sign-on (SSO) while controlling what user data these applications can access.
Key Management Tasks
- Configure SSO: Enable seamless authentication
- Assign users and groups: Control who can access the application
- Configure provisioning: Automatically create/update user accounts in the application
- Review permissions: Audit what data the application can access
Key Roles for Application Management
| Role | Capabilities |
|---|---|
| Application Administrator | Manage all aspects of app registrations and enterprise apps |
| Cloud Application Administrator | Manage enterprise apps, assign users, configure SSO |
| Application Developer | Create app registrations only |
⚠️ Exam Trap: Assigning Application Administrator when Cloud Application Administrator suffices. If Admin1 only needs to assign users to applications (not manage app registrations), Cloud Application Administrator follows least privilege.
