Skip to main content
Administer Identity Administering identity is a foundational responsibility for Azure administrators. It covers user and device identities, role and permission management, group organization, and access controls that ensure the right people and devices can securely reach the right resources. This lesson covers two primary learning objectives:
  • Configure Microsoft Entra ID
  • Configure user and group accounts
Objective 1 — Configure Microsoft Entra ID This objective teaches how to set up and manage Microsoft Entra ID (formerly Azure Active Directory), the identity platform used to manage users, groups, applications, and devices in Azure. Key topics in this objective:
  • Introduction to Microsoft Entra ID: Foundational concepts and Entra ID’s role in Azure identity and access management.
  • Identity concepts: Identity types, authentication methods (password, MFA, FIDO2, etc.), and common access models (RBAC, role assignments, conditional access).
  • Microsoft Entra ID editions: Differences between Free, Premium P1, and Premium P2 feature levels to help you choose the right plan for your organization.
  • Configuring device identities: How to register and manage devices (Azure AD Join, hybrid Azure AD Join, and registered devices) to enable device-based conditional access and management.
A presentation slide titled "Learning Objectives" with a blue gradient panel on the left. The right side lists Microsoft Entra ID topics (introduction, concepts, editions, and configuring device identities) with colorful numbered icons.
We will walk through the methods to configure device identities and the administrative controls required to manage them alongside user identities. Entra ID editions at a glance Objective 2 — Configure user and group accounts This objective focuses on practical operations for managing user and group accounts in Entra ID:
  • User accounts: Create and manage user identities, set profile attributes, configure authentication methods, and assign directory roles.
  • Bulk operations: Use CSV/import, PowerShell, or Microsoft Graph to create, update, or delete many users efficiently.
  • Group accounts: Organize users into security groups and Microsoft 365 groups for simplified permission and license management; understand static vs. dynamic membership.
  • Self-Service Password Reset (SSPR): Enable and configure SSPR so users can securely reset forgotten passwords without admin intervention.
  • Multi-tenant environments: Best practices for managing external users, B2B collaboration, and onboarding across multiple tenants.
Common administration tasks and recommended tools
This module focuses on Entra ID fundamentals and administrative tasks. For deep-dive security topics, conditional access advanced configurations, and on-premises synchronization details, see the Microsoft Azure Security Technologies (AZ-500) course and the official Microsoft documentation.
High-level overview (whiteboard) Microsoft Entra ID acts as the central identity hub in Azure. It aggregates identity sources and governs access to cloud and hybrid resources. Common capabilities include single sign-on (SSO), multifactor authentication (MFA), conditional access policies, device registration, and identity governance. The diagram below illustrates typical identity flows: on-premises identities can be synchronized to Entra ID using tools such as Azure AD Connect; B2B collaboration allows external partner and guest access; and Entra ID centrally manages users, groups, licenses, and device identities.
A diagram titled "Administer Identity – Overview" showing Microsoft Entra ID in the center syncing with on‑premises identities and connecting via B2B to external identity providers. It flows down to manage Users and Groups, with notes about profiles, licenses, group types, and assignment types.
Within Microsoft Entra ID:
  • Users: Individual identities that can be authenticated, assigned directory roles, and granted access to resources.
  • Groups: Collections of users used for bulk assignment of access and licenses. Understand group types (security vs. Microsoft 365) and membership models (static vs. dynamic).
  • B2B collaboration: Invite external users as guests to collaborate while applying organizational policies and restricted permissions.
  • Device identities: Register, Azure AD Join, or hybrid Azure AD Join devices to enforce device-based conditional access and compliance policies.
Next steps Now that you have an overview of this module and the topics we’ll cover — Entra ID concepts, editions, device identities, and user/group administration — proceed to the first lesson, where we will explore Microsoft Entra ID fundamentals and begin configuring users, groups, and devices. Further reading and references

Watch Video