Manage Identities & Governance — MOC
MS Learn path: Manage identities and governance in Azure Covers the Identity & Governance skill area of the AZ-104 exam.
Map / Canvas
The core idea
Administrators must control who can access what, and enforce how the environment is governed (cost, compliance, standards). Two halves:
- Identity = the people/apps (Microsoft Entra ID) + how they prove identity (authN) and what they’re allowed to do (authZ via RBAC).
- Governance = subscriptions, management groups, policies, tagging, and cost control.
Concepts (linked from here)
Identity
- Microsoft Entra ID (Azure AD) — the identity service for users/apps
- User accounts vs service principals & managed identities
- Multifactor authentication
- Self-service password reset (SSPR)
- Role-Based Access Control (RBAC)
- Microsoft Entra roles
- Conditional Access
Governance
- Azure subscription
- Management groups
- Resource groups
- Azure Policy
- Blueprints / landing zones
- Tags
- Cost Management & budgets
Modules in this path
- Understand Microsoft Entra ID
- Create, configure & manage Identities
- Secure Azure resources with RBAC
- Manage authentication, MFA & SSPR
- Manage subscriptions & governance
Skills measured (exam blueprint)
- Manage Microsoft Entra ID (users, groups, tenants, SSPR, MFA)
- Manage governance & compliance (subscriptions, RBAC, policies, tags, cost)