From f8644bf035ed37e66254963684f5c1ac0f6b2a89 Mon Sep 17 00:00:00 2001 From: staleycyn <45440075+staleycyn@users.noreply.github.com> Date: Mon, 4 Dec 2023 13:02:29 -0800 Subject: [PATCH] Update LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md --- ..._02a_Manage_Subscriptions_and_RBAC_Entra.md | 18 +++++------------- 1 file changed, 5 insertions(+), 13 deletions(-) diff --git a/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md b/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md index ab2e62f7..d1499b91 100644 --- a/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md +++ b/New Instructions/Lab/LAB_02a_Manage_Subscriptions_and_RBAC_Entra.md @@ -1,16 +1,17 @@ --- lab: - title: 'Lab 02: Manage Subscriptions and RBAC' + title: 'Lab 02a: Manage Subscriptions and RBAC' module: 'Administer Governance and Compliance' --- -# Lab 02 - Manage Subscriptions and RBAC -# Student lab manual +# Lab 02a - Manage Subscriptions and RBAC ## Lab requirements This lab requires permissions to create custom Azure Role Based Access Control (RBAC) roles, and assign these roles to users. +## Estimated timing: 30 minutes + ## Lab scenario In order to simplify management of Azure resources in your organization, you have been tasked with implementing the following functionality: @@ -24,28 +25,19 @@ In order to simplify management of Azure resources in your organization, you hav **Note:** An **[interactive lab simulation](https://mslabs.cloudguides.com/guides/AZ-104%20Exam%20Guide%20-%20Microsoft%20Azure%20Administrator%20Exercise%202)** is available that allows you to click through a similar lab at your own pace. You may find slight differences between the interactive simulation and the hosted lab, but the core concepts and ideas being demonstrated are the same. -## Objectives - -In this lab, you will: +## Tasks + Task 1: Implement management groups + Task 2: Review and assign a built-in Azure role + Task 3: Create and assign a custom RBAC roles + Task 4: Monitor role assignments with the Activity Log - -## Estimated timing: 30 minutes - ## Architecture diagram ![Diagram of lab tasks.](../media/az104-lab2a-architecture.png) -# Instructions - -## Exercise 1 - ## Task 1: Implement Management Groups In this task, you will create and configure management groups. Management groups are used to logically organize subscriptions. Subscriptions should be segmented as part of the [Microsoft Well-Architected Framework](https://learn.microsoft.com/en-us/azure/well-architected/), and allow for RBAC and Azure Policy to be assigned and inherited to other management groups and subscriptions. For example, if your organization has a dedicated support team for Europe, you can organize European subscriptions into a management group to provide the support staff access to those subscriptions (without providing individual access to all subscriptions). In our scenario everyone on the Help Desk will need to create a support request across all subscriptions.