Configure user and group accounts Flashcards
Cloud identities
These users exist only in Azure AD. Examples are administrator accounts and users that you manage yourself. Cloud identities can be in Azure Active Directory or an external Azure Active Directory, if the user is defined in another Azure AD instance. When these accounts are removed from the primary directory, they are deleted
Directory-synchronized identities
These users exist in an on-premises Active Directory. A synchronization activity that occurs via Azure AD Connect brings these users in to Azure. Their source is Windows Server AD.
Guest users
These users exist outside Azure. Examples are accounts from other cloud providers and Microsoft accounts such as an Xbox LIVE account. Their source is Invited user. This type of account is useful when external vendors or contractors need access to your Azure resources. Once their help is no longer necessary, you can remove the account and all of their access.
How long does it take for a deleted user, to be permanently deleted
30 days
Whats the difference between a security group and Microsoft 354 group
Security groups - gives access to resources and add policies to a group of users
Microsoftr 365 groups - can give members access to shared mailbox, calendar, files, Sharepoint site, and more.
Assigned users
Adds a specific user\s to be members of a group
Dynamic users
Gives/removes access based on user attributes
Dynamic Device (Security groups only)
Automaticaly add and remove devices based on attributes
What is the contributor role?
Contributor grants full access to manage all resources, but cannot assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries
What is the Global Administrator role
Global Administrator manages all aspects of Azure AD and Microsoft services that use Azure AD identities. This includes managing groups across tenants and assigning other administrator roles.
