Summary
Active Directory is used to manage identity and user-related information at scale. Active Directory Domain Services provides on-premises service, while Microsoft Entra ID provides a cloud-based solution. While they are similar, they each provide distinct advantages are often used together. Users are added to security groups, and permissions are assigned to these groups. There are several default security groups to simplify administration.