Implement Initial configuration of Azure Active Directory

Question 1

What licenses do you require to have Company Branding

Answer 1

Azure AD Premium 1, Premium 2, or Office 365 (365 apps)

Question 2

Global Administrator

Answer 2

• Manage access to all admin in features in Azure AD
• Assign admin roles
• Resets passwords for any other users

Question 3

User Administrator

Answer 3

• Creates & managers all of aspects of users and groups
• Manage support tickets
• Monitor service health
• Change passwords for users, helpdesk admins and user admins

Question 4

Billing Administrator

Answer 4

• Make purchases
• Manages Subscriptions
• Manage support tickets
• Monitors service health

Question 5

Azure Roles

Answer 5

• Manage access to Azure resources
• Scope can be specified at multiple levels (management group, subscription, resource group, resource)
• Role info can be accessed in the Azure portal, Azure CLI, Azure Powershell, ARM templates, and REST API

Question 6

Azure AD Roles

Answer 6

• Manage access to Azure AD resources
• Scope is at tenant level or can be applied to an Administrative Unit
• Role info can be accessed in the azure admin portal. M365 admin center, Microsoft Graph, Azure AD Powershell

Question 7

What is an Administrative Unit

Answer 7

• Administrative Units are resources that can be containers for other Azure AD resources.
• An administrative unit can only contain users or groups

Question 8

What is an Application Administrator

Answer 8

Grants the ability to manage all applications in the directory, including registrations, SSO-settings, user and group assignments, licensing Application Proxy settings, and consent.
- Doesn’t let you manage Conditional Access.

Question 9

What is a Cloud Application Administrator

Answer 9

Grants the same as an Application Administrator except Application Proxy Settings (due to no on-prem permission)

Question 10

What is an Enterprise Application Owner

Answer 10

Grants the ability to manage the enterprise app that the users own including SSO-settings, users, and group assignments, adding more owners.
- Doesn’t grant you the ability to manage App Proxy settings or Conditional Access.

Question 11

What is an Application Registration Owner

Answer 11

Grants the ability to manage application registrations for apps that the user owns, including the app’s manifest and adding other owners.

Question 12

What is an Application Registration Owner

Answer 12

Grants the ability to manage application registrations for apps that the user owns, including the app’s manifest and adding other owners.

Question 13

What is a permission

Answer 13

Consent or authorization to perform a specific action.

Question 14

Default permissions for a Member

Answer 14

Manage their profile photo, and mobile number, change their own password and invite, B2B guests. Can read all directory information.

Question 15

Default permissions for a guest

Answer 15

Manage their own profile, change their own password, and retrieve some info about other users.
- Can also be added to administrator roles, which grant them full read and write permissions contained in the role.
- Guests can invite other guests
- Can’t read all directory info (e.g. list of users, groups etc)