Section 1
Identity & Governance Foundations
Preview
Preview: Design Identity, Governance, and Monitoring Solutions
- 4 of 31 lesson topics
- 1 overview segment
- 3 core concepts
- 2 exam tips
Lesson Topics
- Access Reviews
- Microsoft Entra identity foundation
- Entra access automation
- Azure RBAC scoped delegation
Overview
Identity and governance design defines who can authenticate, what they can access, where controls are inherited, and how telemetry supports operational decisions across tenants, subscriptions, and workloads.
Core Concepts
- **Microsoft Entra ID:** The identity platform for authenticating users, workloads, and applications. It supports identity lifecycle and sign-in controls, while Azure resource authorization is handled through Azure RBAC and data-plane permissions.
- **Access Reviews:** Periodic reviews of continued access for users, guests, groups, applications, or access packages. Removal or remediation depends on configured reviewers, decisions, policies, and automation.
- **Entitlement Management:** Uses access packages, request flows, approvals, assignment policies, expiration, and reviews to automate access to groups, applications, and SharePoint resources; Azure resource access normally still depends on group membership or another authorization design.
Exam Tips
- Identify whether the requirement is authentication, authorization, governance evaluation, metadata, or telemetry before choosing a service.
- For least privilege, choose the smallest scope that still covers all required resources and pair it with the least-permissive suitable role.