User account

What it is

A user account is the identity record in Microsoft Entra ID that represents a person (or service account) and what they’re permitted to sign in as. Each user belongs to a tenant.

Why it exists

Users are the primary principals whose access administrators manage. Entra ID authenticates them (password, MFA) and they’re granted access either directly or through group membership.

Key ideas

  • Properties — display name, user principal name (UPN, e.g. [email protected]), sign-in status, job title, department, and usage-location.
  • Types — cloud-only users vs synchronized users (from on-prem AD via Entra Connect / cloud sync).
  • Directory roles — a user can hold Entra roles (directory-level) and be subject to RBAC assignments.
  • Guest users (B2B) — external collaborators invited into the tenant; governed by external collaboration settings.

How it fits (diagram)

user-account.svg

Exam notes

  • UPN vs sign-in name; Usage location is required for licensing/MFA in some cases.
  • Creating/bulk-creating users, assigning licenses, and resetting credentials are common AZ-104 admin tasks.
  • Understand guest vs member and how guest access is scoped (B2B).

entraid · groups · tenant · service-principal · mfa

📘 Source: Microsoft Learn — User Account