Study/AZ-104-MicrosoftAzureAdministrator
1
0
Fork 0
mirror of https://github.com/MicrosoftLearning/AZ-104-MicrosoftAzureAdministrator.git synced 2026-02-05 08:09:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md

Browse Source
This commit is contained in:
staleycyn 2023-12-12 13:06:23 -08:00 committed by GitHub
parent 7920b4ac91
commit a6529c1fc5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md
View File

@ -31,6 +31,10 @@ There are some interactive lab simulations that you might find useful for this t
+ [Manage subscriptions and RBAC](https://mslabs.cloudguides.com/guides/AZ-104%20Exam%20Guide%20-%20Microsoft%20Azure%20Administrator%20Exercise%202). Implement a management group, and create and assign a custom RBAC role.
## Architecture diagram
![Diagram of lab tasks.](../media/az104-lab2a-architecture.png)
## Tasks
+ Task 1: Implement management groups.
@ -38,11 +42,6 @@ There are some interactive lab simulations that you might find useful for this t
+ Task 3: Create and assign a custom RBAC roles.
+ Task 4: Monitor role assignments with the Activity Log.
## Architecture diagram
![Diagram of lab tasks.](../media/az104-lab2a-architecture.png)
## Task 1: Implement Management Groups
In this task, you will create and configure management groups. Management groups are used to logically organize subscriptions. Subscriptions should be segmented as part of the [Microsoft Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/), and allow for RBAC and Azure Policy to be assigned and inherited to other management groups and subscriptions. For example, if your organization has a dedicated support team for Europe, you can organize European subscriptions into a management group to provide the support staff access to those subscriptions (without providing individual access to all subscriptions). In our scenario everyone on the Help Desk will need to create a support request across all subscriptions.
@ -203,6 +202,12 @@ Congratulations on completing the lab. Here are the main takeaways for this lab.
## Cleanup your resources
If you are working with your own subscription take a minute to delete the lab resource group. This will ensure resources are freed up and cost is minimized.
If you are working with your own subscription take a minute to delete the lab resources. This will ensure resources are freed up and cost is minimized. The easiest way to delete the lab resources is to delete the lab resource group.
+ In the Azure portal, select the resource group, select **Delete the resource group**, **Enter resource group name**, and then click **Delete**.
+ Using Azure PowerShell, `Remove-AzResourceGroup -Name resourceGroupName`.
+ Using the CLI, `az group delete --name resourceGroupName`.