Audience profile
As a candidate for this exam, you should have subject matter expertise in implementing, managing, and monitoring an organization’s Microsoft Azure environment, including virtual networks, storage, compute, identity, security, and governance.
As an Azure administrator, you often serve as part of a larger team dedicated to implementing an organization’s cloud infrastructure. You also coordinate with other roles to deliver Azure networking, security, database, application development, and DevOps solutions.
You should be familiar with
In addition, you should have experience with
PowerShellAzure CLIThe Azure portalAzure Resource Manager templates or Bicep filesMicrosoft Entra ID
Manage Azure identities and governance (20–25%)
Manage Microsoft Entra users and groups
Create users and groups
Manage user and group properties
Manage licenses in Microsoft Entra ID
Manage external users
Add and manage B2B collaboration usersManage user and guest user access with access reviewsCreate an access review of an access package in entitlement managementOverview: Cross-tenant access with Microsoft Entra External IDMicrosoft Entra B2B best practices and recommendationsLimitations of B2B collaboration
Configure self-service password reset (SSPR)
Manage access to Azure resources
Manage built-in Azure roles
Assign roles at different scopes
Assign Azure roles using the Azure portalSteps to assign an Azure roleConfigure Microsoft Entra Privileged Identity Management (just-in-time role activation)Delegate role assignment management to othersWhat is Azure role-based access control (Azure RBAC)?Quickstart: Assign an Azure role using an ARM template
Interpret access assignments
Manage Azure subscriptions and governance
Implement and manage Azure Policy
Configure resource locks
Apply and manage tags on resources
Manage resource groups
Manage subscriptions
Manage costs by using alerts, budgets, and Azure Advisor recommendations
Configure management groups
Implement and manage storage (15–20%)
Configure access to storage
Configure Azure Storage firewalls and virtual networks
Create and use shared access signature (SAS) tokens
Configure stored access policies
Manage access keys
Configure identity-based access for Azure Files
Overview of Azure Files identity-based authentication for SMB accessEnable Microsoft Entra Domain Services authentication on Azure FilesEnable AD DS authentication for Azure Files (on-premises Active Directory)Assign share-level permissions for Azure FilesConfigure directory and file-level permissions (Windows ACLs) for Azure Files