AZ-104: Manage identities and governance in Azure

After completing this module, you will be able to:

• Identify the features and uses of Azure Active Directory.
• Define the main Azure Active Directory components such as identity, account, and tenant.
• Compare Azure Active Directory to Azure Directory Domain Services.
• Identify features of Azure Active Directory editions.
• Identify features and usage cases for Azure AD Join.
• Identify features and usage cases for Self-Service Password Reset.

After completing this module, you will be able to:

• Configure users accounts and user account properties.
• Create new user accounts.
• Import bulk user accounts with a template.
• Configure group accounts and assignment types.

After completing this module, you will be able to:

• Identify the features and uses of Azure Active Directory.
• Define the main Azure Active Directory components such as identity, account, and tenant.
• Compare Azure Active Directory to Azure Directory Domain Services.
• Identify features of Azure Active Directory editions.
• Identify features and usage cases for Azure AD Join.
• Identify features and usage cases for Self-Service Password Reset.

After completing this module, you will be able to:

• Create management groups to target policies and spend budgets.
• Implement Azure policy with policy and initiative definitions.
• Scope Azure policies and determine compliance.

After completing this module, you will be able to:

• Identify the features and usage cases for role-based access control.
• List and create role definitions.
• Create role assignments.
• Identify the differences between Azure role-based access control and Azure Active Directory roles.
• Manage access to subscriptions using role-based access control.
• Review the built-in Azure role-based access control roles.

In this module, you will:

• Add users to Azure Active Directory.
• Manage app and resource access by using Azure Active Directory groups.
• Give guest users access in Azure Active Directory business to business (B2B).

In this module, you will:

• Verify access to resources for yourself and others
• Grant access to resources
• View activity logs of Azure RBAC changes

In this module, you will:

• Decide whether to implement self-service password reset.
• Implement self-service password reset to meet your requirements.
• Configure self-service password reset to customize the experience.

• Introduction
• Describe Azure Active Directory benefits and features
• Describe Azure Active Directory concepts
• Compare Active Directory Domain Services to Azure Active Directory
• Select Azure Active Directory editions
• Implement Azure Active Directory join
• Implement self-service password reset
• Knowledge check
• Summary and resources

• Introduction
• Create user accounts
• Manage user accounts
• Create bulk user accounts
• Create group accounts
• Create administrative units
• Knowledge check
• Summary and resources

• Introduction
• Identify regions
• Implement Azure subscriptions
• Obtain a subscription
• Identify subscription usage
• Implement cost management
• Apply resource tagging
• Apply cost savings
• Knowledge check
• Summary and resources

• Introduction
• Create management groups
• Implement Azure policies
• Create Azure policies
• Create policy definitions
• Create initiative definitions
• Scope the initiative definition
• Determine compliance
• Knowledge check
• Summary and resources

• Introduction
• Implement role-based access control
• Create a role definition
• Create a role assignment
• Compare Azure roles to Azure Active Directory roles
• Apply role-based access control
• Determine role-based access control roles
• Knowledge check
• Summary and resources

• Introduction
• What are user accounts in Azure Active Directory?
• Exercise - Add and delete users in Azure Active Directory
• Manage app and resource access by using Azure Active Directory groups
• Exercise - Assign users to Azure Active Directory groups
• Collaborate by using guest accounts and Azure Active Directory B2B
• Exercise - Give guest users access in Azure Active Directory B2B
• Summary

• Introduction
• What is Azure RBAC?
• Knowledge check - What is Azure RBAC?
• Exercise - List access using Azure RBAC and the Azure portal
• Exercise - Grant access using Azure RBAC and the Azure portal
• Exercise - View activity logs for Azure RBAC changes
• Knowledge check - Using Azure RBAC
• Summary

• Introduction
• What is self-service password reset in Azure Active Directory?
• Implement Azure AD self-service password reset
• Exercise - Set up self-service password reset
• Exercise - Customize directory branding
• Summary