diff --git a/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md b/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md index b72ef26f..f5eeba98 100644 --- a/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md +++ b/Instructions/Labs/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md @@ -157,6 +157,19 @@ If you are working with **your own subscription** take a minute to delete the la + Using Azure PowerShell, `Remove-AzResourceGroup -Name resourceGroupName`. + Using the CLI, `az group delete --name resourceGroupName`. +## Extend your learning with Copilot + +Copilot can assist you in learning how to use the Azure scripting tools. Copilot can also assist in areas not covered in the lab or where you need more information. Open an Edge browser and choose Copilot (top right) or navigate to *copilot.microsoft.com*. Take a few minutes to try these prompts. ++ Create two tables highlighting important PowerShell and CLI commands to get information about organization subscriptions on Azure and explain each command in the column “Explanation”. ++ What is the format of the Azure RBAC JSON file? ++ What are the basic steps for creating a custom Azure RBAC role? ++ What is the difference between Azure RBAC roles and Microsoft Entra ID roles? + +## Learn more with self-paced training + ++ [Secure your Azure resources with Azure role-based access control (Azure RBAC)](https://learn.microsoft.com/training/modules/secure-azure-resources-with-rbac/). Use Azure RBAC to manage access to resources in Azure. ++ [Create custom roles for Azure resources with role-based access control (RBAC)](https://learn.microsoft.com/training/modules/create-custom-azure-roles-with-rbac/). Understand the structure of role definitions for access control. Identify the role properties to use that define your custom role permissions. Create an Azure custom role and assign to a user. + ## Key takeaways Congratulations on completing the lab. Here are the main takeaways for this lab. @@ -166,13 +179,7 @@ Congratulations on completing the lab. Here are the main takeaways for this lab. + Azure has many built-in roles. You can assign these roles to control access to resources. + You can create new roles or customize existing roles. + Roles are defined in a JSON formatted file and include *Actions*, *NotActions*, and *AssignableScopes*. -+ You can use the Activity Log to monitor role assignments. - -## Learn more with self-paced training - -+ [Secure your Azure resources with Azure role-based access control (Azure RBAC)](https://learn.microsoft.com/training/modules/secure-azure-resources-with-rbac/). Use Azure RBAC to manage access to resources in Azure. -+ [Create custom roles for Azure resources with role-based access control (RBAC)](https://learn.microsoft.com/training/modules/create-custom-azure-roles-with-rbac/). Understand the structure of role definitions for access control. Identify the role properties to use that define your custom role permissions. Create an Azure custom role and assign to a user. - ++ You can use the Activity Log to monitor role assignments.