Introduction
Azure AD Identities
Managing Users and Groups
Access Reviews
Managing Passwords and Password Policies
Self-Service Password Reset
Managing Product Licenses
Summary
The course is part of these learning paths
See 4 moreMicrosoft 365 offers Enterprise Mobility & Security (EMS), Windows 10, and Office 365 to enhance business productivity and security. Because Microsoft 365 offers a variety of services and features, not everything is in the same place. Therefore, we need to navigate within different portals, and familiarity with “what is where” gets really important over time.
In this course, we will have a look at some of the most common tasks to be performed by Microsoft 365 administrators related to Azure AD identities, how to secure your environment by assigning the correct permissions to your users, and how to reduce administrative overhead. We’ll do various tasks in different ways by using the Microsoft 365 Admin Center, the Azure portal, and even use Windows PowerShell for automating bulk actions.
Choosing the right type of identity for your current infrastructure is the first step for any successful Microsoft 365 deployment.
Learning Objectives
- Plan Azure AD Identities
- Manage Users and Groups
- Manage User Access with Access Reviews
- Manage Passwords and Password Policies
- Implement Self-Service Password Reset (SSPR)
- Manage Product Licenses
Intended Audience
- People preparing for Microsoft’s MS-100 exam
- Microsoft 365 Administrators
Prerequisites
- Experience with Microsoft 365
- Experience with the Azure portal
- Experience with PowerShell
Licensing users is also available via the Azure AD portal. Once you're logged in to the Azure AD portal, navigate to Users on your left-hand side, and if you don't see Users, go to All services and star the service that you wish to see on the left-hand side.
Let's go to Users. And here we can see all the users that we have currently in our tenant. To license a single user, click on the user, and go to Licenses on the left. Click on Assign and Products. Choose your subscription, Select, and go to Assignment options.
As you can see, everything is turned on by default, so if you wish your user not to have access to certain plans, this is where you would turn them off. But let's assume that we want everything turned on for this user. Click on OK and then Assign.
Now the license has been assigned for this user, and we can see that all the services have been enabled. Let's go back to All users. Once we are back to the All users section, it is different than from the Microsoft 365 Admin Center, where we select multiple users and we assign licenses from there.
From the Azure portal, we cannot select multiple users and have the option to assign licenses. We need to go to Azure Active Directory, and from there, go to Licenses. Click on All products, and select your subscription. Click on Assign, and now we can select Users and groups. Choose your users on the right, and click on Select.
Go to Assignment options, and again, everything is turned on by default. So if you don't want your users to have access to something specific, just set the plan on Off. Then click on OK and Assign.
Go back to All users, and let's remove a license for a user. Click on your user, go to Licenses, and select the subscription. At the top, we have Remove license. Confirm that you want to remove this license for this user, and now the license has been removed.
Veronique is a SharePoint and Office 365 consultant for an IT company based in Glasgow, UK. She loves photography, the outdoors, and long walks with her two dogs! You can follow Veronique on Twitter @veronicageek or read her blog at https://veronicageek.com.