AZ-104: Manage identities and governance in Azure

Azure Active Directory
Azure Role-based access control
Azure Resource Manager
Cost Management

Learn how to manage Azure Active Directory objects, role-based access control (RBAC), subscriptions, and governance in Azure. This learning path helps prepare you for Exam AZ-104: Microsoft Azure Administrator.

Modules in this learning path

Create users in Azure Active Directory. Understand different types of groups. Create a group and add members. Manage business-to-business guest accounts.

Manage users and groups in Azure Active Directory

Evaluate self-service password reset to allow users in your organization to reset their passwords or unlock their accounts. Set up, configure, and test self-service password reset.

To grant access to a subscription, identify the appropriate role to assign to an employee. Understand when you might need to temporarily elevate your own access to regain access to a subscription.

Learn how to use Azure RBAC to manage access to resources in Azure.

Understand the structure of role definitions for access control. Identify the role properties to use that define your custom role permissions. Create an Azure custom role and assign to a user.

Use Azure Resource Manager to organize resources, enforce standards, and protect critical assets from deletion.

Learn about the factors that influence cost and tools you can use to help estimate and manage your cloud spend.

Learn how to use cost analysis to understand how your costs accrue each month. Use this understanding to create an Azure budget to monitor and alert on your costs.

Identify Azure resources that you can move to a different resource group. Use the Azure portal to move resources.

Evaluate options to manage device identities in Azure AD. Allow users to join devices in Azure AD. Require devices to be marked as compliant. Enable Enterprise State Roaming.