Manage identities and governance for Azure administrators

In this module, you will:

• Add users to Azure Active Directory.
• Manage app and resource access by using Azure Active Directory groups.
• Give guest users access in Azure Active Directory business to business (B2B).

In this module, you will:

• Learn the difference between Azure AD and Windows Server Active Directory
• Understand tenants, subscriptions, and users
• Create a new Azure Active Directory
• Add users and groups to an Azure AD
• Manage roles in an Azure AD
• Learn how to create a hybrid identity solution with Azure AD Connect

In this module, you will:

• Decide whether to implement self-service password reset.
• Implement self-service password reset to meet your requirements.
• Configure self-service password reset to customize the experience.

In this module, you will:

• Identify the appropriate role to assign to an employee.
• Identify scenarios where the Global Administrator for Azure Active Directory might need to temporarily elevate their access in Azure.
• Grant the employee management access to a subscription.

In this module, you will:

• Verify access to resources for yourself and others
• Grant access to resources
• View activity logs of Azure RBAC changes

In this module, you will:

• Identify role definition structure and properties
• Create and manage an Azure custom role for resource access management

In this module, you will:

• Use resource groups to organize Azure resources
• Use tags to organize resources
• Apply policies to enforce standards in your Azure environments
• Use resource locks to protect critical Azure resources from accidental deletion

After completing this module, you'll be able to:

• Use the Total Cost of Ownership Calculator to compare your current datacenter costs to running the same workloads on Azure.
• Describe the different ways you can purchase Azure products and services.
• Use the Pricing calculator to estimate the monthly cost of running your cloud workloads.
• Define some of the major factors that affect total cost and apply recommended practices to minimize cost.

In this module, you will:

• Set up your organization for success when using Cost Management
• Analyze costs on a subscription using cost analysis
• Create your first Azure budget based on your analysis

In this module, you will:

• Identify whether you can move resources
• Move resources to another resource group

In this module, you will:

• Describe options to manage device identities in Azure AD
• Configure Azure AD join to manage device identities
• Configure Enterprise State Roaming to reduce the time that users need to configure a new device

In this module, you will:

• Add a custom domain name in Azure Active Directory
• Identify the common issues when verifying the custom domain name

In this module, you will:

• Describe the features of Azure Active Directory Identity Protection.
• Describe the investigation and remediation features of Azure Active Directory Identity Protection.

In this module, you will:

• Learn about Azure AD Multi-Factor Authentication (Azure AD MFA)
• Create a plan to deploy Azure AD MFA
• Turn on Azure AD MFA for users and specific apps

• Introduction
• What are user accounts in Azure Active Directory?
• Exercise - Add and delete users in Azure Active Directory
• Manage app and resource access by using Azure Active Directory groups
• Exercise - Assign users to Azure Active Directory groups
• Collaborate by using guest accounts and Azure Active Directory B2B
• Exercise - Give guest users access in Azure Active Directory B2B
• Summary

• Introduction
• What is Azure Active Directory?
• Create and manage users
• Create and manage groups
• Use roles to control resource access
• Connect Active Directory to Azure AD with Azure AD Connect
• Summary

• Introduction
• What is self-service password reset in Azure Active Directory?
• Implement Azure AD self-service password reset
• Exercise - Set up self-service password reset
• Exercise - Customize directory branding
• Summary

• Introduction
• Understand the difference between Azure roles and Azure AD roles
• Understand when you might need to elevate your access
• Exercise - Get access to an Azure subscription
• Summary

• Introduction
• What is Azure RBAC?
• Knowledge check - What is Azure RBAC?
• Exercise - List access using Azure RBAC and the Azure portal
• Exercise - Grant access using Azure RBAC and the Azure portal
• Exercise - View activity logs for Azure RBAC changes
• Knowledge check - Using Azure RBAC
• Summary

• Introduction
• What are custom roles in Azure?
• Exercise - Create an Azure custom role
• Manage Azure custom roles
• Exercise - View and manage an Azure custom role
• Summary

• Introduction
• Principles of resource groups
• Use tagging to organize resources
• Use policies to enforce standards
• Secure resources with role-based access control
• Use resource locks to protect resources
• Check your Knowledge
• Summary

• Introduction
• Compare costs by using the Total Cost of Ownership Calculator
• Exercise - Compare sample workload costs by using the TCO Calculator
• Purchase Azure services
• Exercise - Estimate workload cost by using the Pricing calculator
• Manage and minimize total cost on Azure
• Knowledge check
• Summary

• Introduction
• Cost management principles
• Evaluate your costs using cost analysis
• Exercise - Determine your most expensive resource and see trends
• Build budgets and alerts
• Exercise - Create your first budget
• Summary

• Introduction
• Identify incorrectly assigned resources in Azure
• Exercise - Identify incorrectly assigned resources
• Assess resources that can move
• Validate resources in Azure
• Identify steps to move resources between Azure resource groups
• Exercise - Move and verify resources between Azure resource groups
• Summary

• Introduction
• What is device identity in Azure?
• What is Azure AD join?
• What is Enterprise State Roaming?
• Summary

• Introduction
• What are domain names in Azure Active Directory?
• Add a custom domain name in Azure Active Directory
• Solve common problems when adding a custom domain name
• Summary

• Introduction
• Azure AD Identity Protection overview
• Detect risks with Azure AD Identity Protection policies
• Investigate and remediate risks detected by Azure AD Identity Protection
• Summary

• Introduction
• What is Azure AD Multi-Factor Authentication?
• Plan your multi-factor authentication deployment
• Exercise - Enable Azure AD Multi-Factor Authentication
• Configure multi-factor authentication methods
• Summary