Section 1: Manage Azure Identities and Governance
Manage Azure Identities and Governance (15-20%)
Manage Azure AD objects
Create users and groups • manage user and group properties • manage device settings • perform bulk user updates • manage guest accounts • configure Azure AD Join • configure self-service password reset
Create a basic group and add members using Azure Active Directory
Add or update a user’s profile information using Azure Active Directory
Bulk import group members (preview) in Azure Active Directory
Quickstart: Add guest users to your directory in the Azure portal
Licensing requirements for Azure AD self-service password reset
Tutorial: Configure hybrid Azure Active Directory join for managed domains
Manage role-based access control (RBAC)
Create a custom role • provide access to Azure resources by assigning roles • interpret access assignments • manage multiple directories
Tutorial: Create a custom role for Azure resources using Azure CLI
Tutorial: Create a custom role for Azure resources using Azure PowerShell
Add or remove role assignments using Azure RBAC and the Azure portal
Understand how multiple Azure Active Directory tenants interact
Manage subscriptions and governance
Configure Azure policies • configure resource locks • apply tags • create and manage resource groups • manage subscriptions • configure Cost Management • configure management groups
Quickstart: Create a policy assignment to identify non-compliant resources
Manage Azure Resource Manager resource groups by using the Azure portal
Create management groups for resource organization and management