Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Microsoft

Manage identities and governance for Azure administrators

Microsoft via Microsoft Learn

Overview

  • Module 1: Learn how to create Azure users and groups in Azure Active Directory.
  • In this module, you will:

    • Add users to Azure Active Directory.
    • Manage app and resource access by using Azure Active Directory groups.
    • Give guest users access in Azure Active Directory business to business (B2B).
  • Module 2: Manage users and groups in Azure Active Directory
  • In this module, you will:

    • Learn the difference between Azure AD and Windows Server Active Directory
    • Understand tenants, subscriptions, and users
    • Create a new Azure Active Directory
    • Add users and groups to an Azure AD
    • Manage roles in an Azure AD
    • Learn how to create a hybrid identity solution with Azure AD Connect
  • Module 3: Learn how to allow users to reset their password with Azure Active Directory self-service password reset.
  • In this module, you will:

    • Decide whether to implement self-service password reset.
    • Implement self-service password reset to meet your requirements.
    • Configure self-service password reset to customize the experience.
  • Module 4: Learn how to assign management access to a subscription by using Azure role-based access control.
  • In this module, you will:

    • Identify the appropriate role to assign to an employee.
    • Identify scenarios where the Global Administrator for Azure Active Directory might need to temporarily elevate their access in Azure.
    • Grant the employee management access to a subscription.
  • Module 5: Learn how to use Azure role-based access control to effectively manage your team’s access to Azure resources.
  • In this module, you will:

    • Verify access to resources for yourself and others
    • Grant access to resources
    • View activity logs of Azure RBAC changes
  • Module 6: Learn how to create custom roles for Azure resources with role-based access control (RBAC).
  • In this module, you will:

    • Identify role definition structure and properties
    • Create and manage an Azure custom role for resource access management
  • Module 7: Use Azure Resource Manager to organize resources, enforce standards, and protect critical assets from deletion.
  • In this module, you will:

    • Use resource groups to organize Azure resources
    • Use tags to organize resources
    • Apply policies to enforce standards in your Azure environments
    • Use resource locks to protect critical Azure resources from accidental deletion
  • Module 8: Migration to the cloud presents new ways to think about your IT expenses. This module teaches you about the factors that influence cost and tools you can use to help estimate and manage your cloud spend. Prepare for AZ-900.
  • After completing this module, you'll be able to:

    • Use the Total Cost of Ownership Calculator to compare your current datacenter costs to running the same workloads on Azure.
    • Describe the different ways you can purchase Azure products and services.
    • Use the Pricing calculator to estimate the monthly cost of running your cloud workloads.
    • Define some of the major factors that affect total cost and apply recommended practices to minimize cost.
  • Module 9: Learn how to use cost analysis to understand how your costs accrue each month.
  • In this module, you will:

    • Set up your organization for success when using Cost Management
    • Analyze costs on a subscription using cost analysis
    • Create your first Azure budget based on your analysis
  • Module 10: Learn how to identify Azure resources you can move, and how to move them to a new resource group.
  • In this module, you will:

    • Identify whether you can move resources
    • Move resources to another resource group
  • Module 11: Learn how to manage device identity by using Azure AD join and Enterprise State Roaming.
  • In this module, you will:

    • Describe options to manage device identities in Azure AD
    • Configure Azure AD join to manage device identities
    • Configure Enterprise State Roaming to reduce the time that users need to configure a new device
  • Module 12: Learn how to add custom domain name to Azure Active Directory.
  • In this module, you will:

    • Add a custom domain name in Azure Active Directory
    • Identify the common issues when verifying the custom domain name
  • Module 13: Use the advanced detection and remediation of identity-based threats to protect your Azure Active Directory identities and applications from compromise.
  • In this module, you will:

    • Describe the features of Azure Active Directory Identity Protection.
    • Describe the investigation and remediation features of Azure Active Directory Identity Protection.
  • Module 14: Learn how to use multi-factor authentication with Azure AD to harden your user accounts.
  • In this module, you will:

    • Learn about Azure AD Multi-Factor Authentication (Azure AD MFA)
    • Create a plan to deploy Azure AD MFA
    • Turn on Azure AD MFA for users and specific apps

Syllabus

  • Module 1: Create Azure users and groups in Azure Active Directory
    • Introduction
    • What are user accounts in Azure Active Directory?
    • Exercise - Add and delete users in Azure Active Directory
    • Manage app and resource access by using Azure Active Directory groups
    • Exercise - Assign users to Azure Active Directory groups
    • Collaborate by using guest accounts and Azure Active Directory B2B
    • Exercise - Give guest users access in Azure Active Directory B2B
    • Summary
  • Module 2: Manage users and groups in Azure Active Directory
    • Introduction
    • What is Azure Active Directory?
    • Create and manage users
    • Create and manage groups
    • Use roles to control resource access
    • Connect Active Directory to Azure AD with Azure AD Connect
    • Summary
  • Module 3: Allow users to reset their password with Azure Active Directory self-service password reset
    • Introduction
    • What is self-service password reset in Azure Active Directory?
    • Implement Azure AD self-service password reset
    • Exercise - Set up self-service password reset
    • Exercise - Customize directory branding
    • Summary
  • Module 4: Manage access to an Azure subscription by using Azure role-based access control (Azure RBAC)
    • Introduction
    • Understand the difference between Azure roles and Azure AD roles
    • Understand when you might need to elevate your access
    • Exercise - Get access to an Azure subscription
    • Summary
  • Module 5: Secure your Azure resources with Azure role-based access control (Azure RBAC)
    • Introduction
    • What is Azure RBAC?
    • Knowledge check - What is Azure RBAC?
    • Exercise - List access using Azure RBAC and the Azure portal
    • Exercise - Grant access using Azure RBAC and the Azure portal
    • Exercise - View activity logs for Azure RBAC changes
    • Knowledge check - Using Azure RBAC
    • Summary
  • Module 6: Create custom roles for Azure resources with role-based access control (RBAC)
    • Introduction
    • What are custom roles in Azure?
    • Exercise - Create an Azure custom role
    • Manage Azure custom roles
    • Exercise - View and manage an Azure custom role
    • Summary
  • Module 7: Control and organize Azure resources with Azure Resource Manager
    • Introduction
    • Principles of resource groups
    • Use tagging to organize resources
    • Use policies to enforce standards
    • Secure resources with role-based access control
    • Use resource locks to protect resources
    • Check your Knowledge
    • Summary
  • Module 8: Plan and manage your Azure costs
    • Introduction
    • Compare costs by using the Total Cost of Ownership Calculator
    • Exercise - Compare sample workload costs by using the TCO Calculator
    • Purchase Azure services
    • Exercise - Estimate workload cost by using the Pricing calculator
    • Manage and minimize total cost on Azure
    • Knowledge check
    • Summary
  • Module 9: Introduction to analyzing costs and creating budgets with Azure Cost Management
    • Introduction
    • Cost management principles
    • Evaluate your costs using cost analysis
    • Exercise - Determine your most expensive resource and see trends
    • Build budgets and alerts
    • Exercise - Create your first budget
    • Summary
  • Module 10: Move Azure resources to another resource group
    • Introduction
    • Identify incorrectly assigned resources in Azure
    • Exercise - Identify incorrectly assigned resources
    • Assess resources that can move
    • Validate resources in Azure
    • Identify steps to move resources between Azure resource groups
    • Exercise - Move and verify resources between Azure resource groups
    • Summary
  • Module 11: Manage device identity with Azure AD join and Enterprise State Roaming
    • Introduction
    • What is device identity in Azure?
    • What is Azure AD join?
    • What is Enterprise State Roaming?
    • Summary
  • Module 12: Add custom domain name to Azure Active Directory
    • Introduction
    • What are domain names in Azure Active Directory?
    • Add a custom domain name in Azure Active Directory
    • Solve common problems when adding a custom domain name
    • Summary
  • Module 13: Protect your identities with Azure AD Identity Protection
    • Introduction
    • Azure AD Identity Protection overview
    • Detect risks with Azure AD Identity Protection policies
    • Investigate and remediate risks detected by Azure AD Identity Protection
    • Summary
  • Module 14: Secure Azure Active Directory users with Multi-Factor Authentication
    • Introduction
    • What is Azure AD Multi-Factor Authentication?
    • Plan your multi-factor authentication deployment
    • Exercise - Enable Azure AD Multi-Factor Authentication
    • Configure multi-factor authentication methods
    • Summary

Reviews

Start your review of Manage identities and governance for Azure administrators

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.