Microsoft Azure Security Technologies (AZ-500) Cert Prep: 1 Manage Identity and Access

Learn key skills from the Manage Identity and Access domain of the Microsoft Azure Security Technologies (AZ-500) exam.

Introduction

• About the Manage Identity and Access domain
• What you should know

1. Manage Azure Active Directory (Azure AD) Identities

• Create and manage a managed identity for Azure resources
• Manage Azure AD groups
• Manage Azure AD users
• Manage external identities using Azure AD
• Manage administrative units

2. Manage Secure Access by Using Azure AD

• Privileged access for Privileged Identity Management
• Implement Conditional Access policies, including MFA
• Configure Azure AD Privileged Identity Management
• Configure Azure AD Identity Protection
• Implement passwordless authentication
• Configure access reviews

3. Manage Application Access

• Single sign-on and multiple identity providers for authorization
• Create app registrations
• Configure app registration permission scopes
• Manage app registration permission consent
• Manage API access to Azure subscriptions and resources
• Configure an authentication method for a service principal

4. Manage Access Control

• Configure Azure role permissions
• Identify the appropriate role
• Interpret role and resource permissions
• Create and assign custom Azure roles and Azure AD roles
• Assign built-in Azure AD roles

Conclusion

• Next steps