Course details

AZ-301 - Microsoft Azure Architect Design: Azure AD & RBAC Design

AZ-301 - Microsoft Azure Architect Design: Azure AD & RBAC Design


Overview/Description
Expected Duration
Lesson Objectives
Course Number
Expertise Level



Overview/Description

In this 20-video course, discover how to apply knowledge of Azure Active Directory (AD) objects, settings, and role-based access control (RBAC) role assignments to address business needs, in preparation for AZ-301: Microsoft Azure Architect Design certification exam. Begin with a look at Azure AD and identity management planning, then recall various strategies for applying access control. Create a new Azure AD tenant, and Azure AD users and groups using the portal and PowerShell. Use command-line interface (CLI) to create an Azure AD user and join a Windows 10 device to Azure AD. Define how RBAC is used in Azure; assign built-in RBAC roles at different scopes; create deny RBAC assignments; and create a custom RBAC role with CLI. Then assign a custom RBAC role, and use PowerShell to remove a custom RBAC role and a RBAC role assignment. Enable self-service password reset and self-service group management to reduce the help desk burden; create an Azure AD enterprise application configuration, and audit Azure AD and sign-in logs. The exercise involves designing Azure AD and RBAC.



Expected Duration (hours)
1.2

Lesson Objectives

AZ-301 - Microsoft Azure Architect Design: Azure AD & RBAC Design

  • discover the key concepts covered in this course
  • recognize when Azure AD configurations best meet business needs
  • recall various strategies for applying access control
  • create a new Azure AD tenant
  • use the portal to create Azure AD users and groups
  • use PowerShell to create Azure AD users and groups
  • use the CLI to create an Azure AD user
  • join a Windows 10 device to Azure AD
  • define how RBAC is used in Azure
  • assign built-in RBAC roles at different scopes
  • create deny RBAC assignments
  • create a custom RBAC role using the CLI
  • assign a custom RBAC role
  • use PowerShell to remove a custom RBAC role
  • use PowerShell to remove a RBAC role assignment
  • enable SSPR to reduce the help desk burden
  • enable SSGM to reduce the help desk burden
  • create an Azure AD enterprise application configuration
  • audit Azure AD and sign-in logs
  • create a new Azure AD tenant, create an Azure AD user and group, assign a built-in RBAC role, and enable Self-Service Password Reset
  • Course Number:
    it_clazad_05_enus

    Expertise Level
    Expert