Tutorial

In the Azure portal, click All services and then select any scope. For example, you can select Management groups, Subscriptions, Resource groups, or a resource. Click the specific resource. Click Access control (IAM). Click the Roles tab to see a list of all the built-in and custom roles. To see the permissions for a particular role, in the Details column, …

In the Azure portal, open a subscription or resource group where you want the custom role to be assignable and then open Access control (IAM). Click Add and then click Add custom role. This opens the custom roles editor with the Start from scratch option selected. In the Custom role name box, specify a name for …

Create a resource group In the navigation list, click Resource groups. Click New to open the Create a resource group page. Select a subscription. For Resource group name, enter example-group or another name. Click Review + create and then click Create to create the resource group. Click Refresh to refresh the list of resource groups.The new resource group appears in your resource groups list. Grant …

In the Settings blade for the resource, resource group, or subscription that you wish to lock, select Locks. To add a lock, select Add. If you want to create a lock at a parent level, select the parent. The currently selected resource inherits the lock from the parent. For example, you could …

Create resource groups Sign in to the Azure portal. Select Resource groups Select Add. Enter the following values: Subscription: Select your Azure subscription. Resource group: Enter a new resource group name. Region: Select an Azure location, such as Central US. Select Review + Create Select Create. It takes a few seconds to create a resource group. …

Log into the Azure portal. Select All services > Management + governance. Select Management Groups. Select + Add management group. Leave Create new selected and fill in the management group ID field. The Management Group ID is the directory unique identifier that is used to submit commands on this management group. This identifier isn’t editable after creation as it’s used …

Configure Azure AD role settings in Privileged Identity Management Sign in to Azure portal with a user in the Privileged Role Administrator role. Open Azure AD Privileged Identity Management > Azure AD roles > Role settings. Select the role whose settings you want to configure Select Edit to open the Role settings page. On the Role setting pane for each …

Risky users With the information provided by the risky users report, administrators can find: Which users are at risk, have had risk remediated, or have had risk dismissed? Details about detections History of all risky sign-ins Risk history Administrators can then choose to take action on these events. Administrators can …

Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator. Browse to Azure Active Directory > Security > Conditional Access. Select New policy. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies. Under Assignments, select Users and groups Under Include, select All users Under Exclude, select Users and …

Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator. Browse to Azure Active Directory > Security > Conditional Access. Select New policy. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies. Under Assignments, select Users and groups Under Include, select All users. Under Exclude, select Users and …

Define locations Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator. Browse to Azure Active Directory > Security > Conditional Access > Named locations. Choose New location. Give your location a name. Choose IP ranges if you know the specific externally accessible IPv4 address ranges that make up that location or Countries/Regions. Provide the IP …

Sign in to the Azure portal as a Global administrator. Search for and select Azure Active Directory, then select Users > All users. Select Per-user MFA. A new page opens that displays the user state, as shown in the following example. Find the user you want to enable for per-user Azure AD Multi-Factor Authentication. You might need …

Sign in to the Azure portal with an account that’s been assigned the Global administrator, Guest, inviter, or User administrator role. Under Azure services, select Azure Active Directory (or use the search box to find and select Azure Active Directory). Under Manage, select Users. Select New guest user. On the New user page, select Invite user and then add the guest user’s …

Create a VM with Windows 2019 OS in Azure Install ADDS on the Windows Server Before you start installing Azure AD Connect, make sure to download Azure AD Connect Sign in as a local administrator to the server you wish to install Azure AD Connect on. You should do this on …

Make sure your have Windows 10 laptop or Windows 10 virtual machine created on Azure. You’ll need to create an Azure AD user if you don’t have it already created Right-click the Windows Start icon and select Settings to display Windows Settings options. Click on Accounts Select Access work or school > Connect. Sign in to Azure …

Sign in to the Azure portal. If you have access to multiple tenants, use the Directories + subscriptions filter in the top menu to switch to the tenant in which you want to register the application. Search for and select Azure Active Directory. Under Manage, select App registrations > New registration. Enter a display Name for your application. Users of …

Sign in to the Azure portal Select Azure Active Directory > Roles and administrators to see the list of all available roles. Select a role to see its assignments. To help you find the role you need, use Add filters to filter the roles. Select Add assignments and then select the users you want to assign to this …