Identities and Governance

Overview

Azure Active Directory (Azure AD)

• users and groups

• administrative units

• devices

• guest accounts

Role-Based Access Control

• (custom) roles

• access control to Azure resources

• access assignments

Subscriptions and Governance

• policies

• resource locks

• tags

• resource groups

• subscriptions

• management groups

• costs / budget

<list related frameworks>

Architecture

<decision tree>

<examples>

Documentation

<how to configure the components>

• Governance in the Microsoft Cloud Adoption Framework

• Management groups - Azure Governance

• Organize Azure subscriptions - Cloud Adoption Framework

• Resource naming and tagging decision guide - Cloud Adoption Framework

• Recommended policies for Azure services - Azure Policy

Learn

• Build a cloud governance strategy

• Core Azure architectural components

• Cloud Adoption Framework for Azure

• Azure Blueprints

• Azure role-based access control (Azure RBAC)

Hands-On

• List access using Azure RBAC and the Azure portal