Microsoft Azure Security Technologies (AZ-500) Cert Prep: 1 Manage Identity and Access

Learn key skills from the Manage Identity and Access domain of the Microsoft Azure Security Technologies (AZ-500) exam.

Introduction

• About the Manage Identity and Access domain
• What you should know
• Lab setup
• Naming and branding changes

1. Manage Microsoft Entra ID (formerly Azure Active Directory) Identities

• Create and manage a managed identity for Azure resources
• Manage Entra ID groups
• Manage Entra ID users
• Manage external identities using Entra ID
• Manage administrative units

2. Manage Secure Access by Using Entra ID

• Configure Entra ID Privileged Identity Management (PIM)
• Implement conditional access policies, including multifactor authentication
• Configure Entra ID identity protection
• Implement passwordless authentication
• Configure access reviews

3. Manage Application Access

• Single sign-on and multiple identity providers for authorization
• Create app registrations
• Configure app registration permission scopes
• Manage app registration permission consent
• Manage API access to Azure subscriptions and resources
• Configure an authentication method for a service principal

4. Manage Access Control

• Configure Azure role permissions
• Identify the appropriate role
• Interpret role and resource permissions
• Create and assign custom Azure roles and Entra ID roles
• Assign built-in Entra ID roles

Conclusion

• Next steps