Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Manage identities and governance for Azure administrators

Microsoft via Microsoft Learn

Go to class Write review

Overview

Module 1: Learn how to create Azure users and groups in Azure Active Directory.

In this module, you will:

Add users to Azure Active Directory.
Manage app and resource access by using Azure Active Directory groups.
Give guest users access in Azure Active Directory business to business (B2B).

Module 2: Manage users and groups in Azure Active Directory

In this module, you will:

Learn the difference between Azure AD and Windows Server Active Directory
Understand tenants, subscriptions, and users
Create a new Azure Active Directory
Add users and groups to an Azure AD
Manage roles in an Azure AD
Learn how to create a hybrid identity solution with Azure AD Connect

Module 3: Learn how to allow users to reset their password with Azure Active Directory self-service password reset.

In this module, you will:

Decide whether to implement self-service password reset.
Implement self-service password reset to meet your requirements.
Configure self-service password reset to customize the experience.

Module 4: Learn how to assign management access to a subscription by using Azure role-based access control.

In this module, you will:

Identify the appropriate role to assign to an employee.
Identify scenarios where the Global Administrator for Azure Active Directory might need to temporarily elevate their access in Azure.
Grant the employee management access to a subscription.

Module 5: Learn how to use Azure role-based access control to effectively manage your team’s access to Azure resources.

In this module, you will:

Verify access to resources for yourself and others
Grant access to resources
View activity logs of Azure RBAC changes

Module 6: Learn how to create custom roles for Azure resources with role-based access control (RBAC).

In this module, you will:

Identify role definition structure and properties
Create and manage an Azure custom role for resource access management

Module 7: Use Azure Resource Manager to organize resources, enforce standards, and protect critical assets from deletion.

In this module, you will:

Use resource groups to organize Azure resources
Use tags to organize resources
Apply policies to enforce standards in your Azure environments
Use resource locks to protect critical Azure resources from accidental deletion

Module 8: Migration to the cloud presents new ways to think about your IT expenses. This module teaches you about the factors that influence cost and tools you can use to help estimate and manage your cloud spend. Prepare for AZ-900.

After completing this module, you'll be able to:

Use the Total Cost of Ownership Calculator to compare your current datacenter costs to running the same workloads on Azure.
Describe the different ways you can purchase Azure products and services.
Use the Pricing calculator to estimate the monthly cost of running your cloud workloads.
Define some of the major factors that affect total cost and apply recommended practices to minimize cost.

Module 9: Learn how to use cost analysis to understand how your costs accrue each month.

In this module, you will:

Set up your organization for success when using Cost Management
Analyze costs on a subscription using cost analysis
Create your first Azure budget based on your analysis

Module 10: Learn how to identify Azure resources you can move, and how to move them to a new resource group.

In this module, you will:

Identify whether you can move resources
Move resources to another resource group

Module 11: Learn how to manage device identity by using Azure AD join and Enterprise State Roaming.

In this module, you will:

Describe options to manage device identities in Azure AD
Configure Azure AD join to manage device identities
Configure Enterprise State Roaming to reduce the time that users need to configure a new device

Module 12: Learn how to add custom domain name to Azure Active Directory.

In this module, you will:

Add a custom domain name in Azure Active Directory
Identify the common issues when verifying the custom domain name

Module 13: Use the advanced detection and remediation of identity-based threats to protect your Azure Active Directory identities and applications from compromise.

In this module, you will:

Describe the features of Azure Active Directory Identity Protection.
Describe the investigation and remediation features of Azure Active Directory Identity Protection.

Module 14: Learn how to use multi-factor authentication with Azure AD to harden your user accounts.

In this module, you will:

Learn about Azure AD Multi-Factor Authentication (Azure AD MFA)
Create a plan to deploy Azure AD MFA
Turn on Azure AD MFA for users and specific apps

Syllabus

Module 1: Create Azure users and groups in Azure Active Directory

Introduction
What are user accounts in Azure Active Directory?
Exercise - Add and delete users in Azure Active Directory
Manage app and resource access by using Azure Active Directory groups
Exercise - Assign users to Azure Active Directory groups
Collaborate by using guest accounts and Azure Active Directory B2B
Exercise - Give guest users access in Azure Active Directory B2B
Summary

Module 2: Manage users and groups in Azure Active Directory

Introduction
What is Azure Active Directory?
Create and manage users
Create and manage groups
Use roles to control resource access
Connect Active Directory to Azure AD with Azure AD Connect
Summary

Module 3: Allow users to reset their password with Azure Active Directory self-service password reset

Introduction
What is self-service password reset in Azure Active Directory?
Implement Azure AD self-service password reset
Exercise - Set up self-service password reset
Exercise - Customize directory branding
Summary

Module 4: Manage access to an Azure subscription by using Azure role-based access control (Azure RBAC)

Introduction
Understand the difference between Azure roles and Azure AD roles
Understand when you might need to elevate your access
Exercise - Get access to an Azure subscription
Summary

Module 5: Secure your Azure resources with Azure role-based access control (Azure RBAC)

Introduction
What is Azure RBAC?
Knowledge check - What is Azure RBAC?
Exercise - List access using Azure RBAC and the Azure portal
Exercise - Grant access using Azure RBAC and the Azure portal
Exercise - View activity logs for Azure RBAC changes
Knowledge check - Using Azure RBAC
Summary

Module 6: Create custom roles for Azure resources with role-based access control (RBAC)

Introduction
What are custom roles in Azure?
Exercise - Create an Azure custom role
Manage Azure custom roles
Exercise - View and manage an Azure custom role
Summary

Module 7: Control and organize Azure resources with Azure Resource Manager

Introduction
Principles of resource groups
Use tagging to organize resources
Use policies to enforce standards
Secure resources with role-based access control
Use resource locks to protect resources
Check your Knowledge
Summary

Module 8: Plan and manage your Azure costs

Introduction
Compare costs by using the Total Cost of Ownership Calculator
Exercise - Compare sample workload costs by using the TCO Calculator
Purchase Azure services
Exercise - Estimate workload cost by using the Pricing calculator
Manage and minimize total cost on Azure
Knowledge check
Summary

Module 9: Introduction to analyzing costs and creating budgets with Azure Cost Management

Introduction
Cost management principles
Evaluate your costs using cost analysis
Exercise - Determine your most expensive resource and see trends
Build budgets and alerts
Exercise - Create your first budget
Summary

Module 10: Move Azure resources to another resource group

Introduction
Identify incorrectly assigned resources in Azure
Exercise - Identify incorrectly assigned resources
Assess resources that can move
Validate resources in Azure
Identify steps to move resources between Azure resource groups
Exercise - Move and verify resources between Azure resource groups
Summary

Module 11: Manage device identity with Azure AD join and Enterprise State Roaming

Introduction
What is device identity in Azure?
What is Azure AD join?
What is Enterprise State Roaming?
Summary

Module 12: Add custom domain name to Azure Active Directory

Introduction
What are domain names in Azure Active Directory?
Add a custom domain name in Azure Active Directory
Solve common problems when adding a custom domain name
Summary

Module 13: Protect your identities with Azure AD Identity Protection

Introduction
Azure AD Identity Protection overview
Detect risks with Azure AD Identity Protection policies
Investigate and remediate risks detected by Azure AD Identity Protection
Summary

Module 14: Secure Azure Active Directory users with Multi-Factor Authentication

Introduction
What is Azure AD Multi-Factor Authentication?
Plan your multi-factor authentication deployment
Exercise - Enable Azure AD Multi-Factor Authentication
Configure multi-factor authentication methods
Summary

Tags

united states

Reviews

Start your review of Manage identities and governance for Azure administrators