AZ-104-MicrosoftAzureAdmini.../Instructions/Demos/01 - Administer Identity.md
2023-06-06 14:38:22 -07:00

2.9 KiB

demo
demo
title module
Demonstration: Administer Identity Administer Identity

1 - Administer Identity

Configure Azure Active Directory

This area does not have a formal demonstration. Consider these Quickstarts.

Quickstart - Access & create new tenant - Azure AD | Microsoft Docs

Quickstart - View groups & members - Azure AD | Microsoft Docs

Configure User and Group Accounts

In this demonstration, we will explore Azure Active Directory.

Note: Depending on your subscription not all areas of the Azure Active Directory blade will be available.

Add or delete users - Azure Active Directory | Microsoft Docs

Create a basic group and add members - Azure Active Directory | Microsoft Docs

Review license and domain information

  1. Access the Azure portal and navigate to the Azure Active Directory blade.

  2. On the Overview blade, review the Tenant information including license and primary domain.

Explore user accounts

  1. Select the Users blade.

  2. Explain the choices for New user and New guest user.

  3. Select New user and discuss the differences between Create user and Invite user.

  4. Create a New user reviewing the IdentityGroups and rolesSettings, and Job Info parameters.

  5. After the user is created, review Reset passwordDelete user, and Sign-ins.

Explore group accounts

  1. Return to the Azure Active Directory page and select the Groups blade.

  2. Create a New group or select an existing group to review.

  3. Review information about a group including Membership type and Type.

Optional - Explore PowerShell for group management

  1. Create a new group called Developers.

New-AzADGroup -DisplayName Developers -MailNickname Developers

  1. Retrieve the Developers group ObjectId.

Get-AzADGroup

  1. Retrieve the user ObjectId for the member to add.

Get-AzADUser

  1. Add the user to the group. Replace groupObjectId and userObjectId.

Add-AzADGroupMember -MemberUserPrincipalName ""myemail@domain.com"" -TargetGroupDisplayName ""MyGroupDisplayName""

  1. Verify the members of the group. Replace groupObjectId.

Get-AzADGroupMember -GroupDisplayName "MyGroupDisplayName"