Identity
Microsoft Entra ID
Tenant identity directory for users, groups, licenses, and authentication.
Key points
- Tenant directory for users, groups, applications, devices, and authentication.
- Directory roles govern Entra administration; Azure roles govern Azure resources.
- Its identities become security principals used by Microsoft and Azure services.
Best-known use cases
- Manage workforce identities and groups.
- Supply principals for Azure RBAC assignments.
What candidates often confuse it with
- Entra ID authenticates identities; Azure RBAC authorizes their Azure resource actions.
- A tenant is an identity boundary; a subscription is an Azure management and billing boundary.
Key takeaway
Use Microsoft Entra ID to administer tenant identities and authentication, then grant resource permissions through the target authorization system.
Related services
- Microsoft Entra External ID
- Self-service password reset
Relevant exam tasks
- D1.1.S1 — Create users and groups
- D1.1.S2 — Manage user and group properties
- D1.1.S3 — Manage licenses in Microsoft Entra ID
- D1.1.S4 — Manage external users
- D1.1.S5 — Configure self-service password reset (SSPR)