Assign a user or group to an application
Start course
1h 11m

As companies race toward the cloud, it’s imperative that IT professionals keep up with the times. Keeping up with the times means maintaining the ability to deploy and maintain cloud-based solutions – particularly those offered through Microsoft Azure.

In this course, you will learn how to create and manage encryption keys in Azure, prevent and respond to security threats to Azure resources, configure access to Azure applications via single sign-on, manage access to Azure applications, and configure federation with public consumer identity providers like Facebook and Google. 

Learning Objectives

  • Create and import keys in the Azure Key Vault
  • Define, configure, and assess security policies
  • Harden Azure resources against threats
  • Configure single sign-on for SaaS applications
  • Configure federation with public consumer identity providers like Facebook and Google

 Intended Audience

  • People interested in becoming Azure security engineers 


  • General knowledge of IT infrastructure
  • General knowledge of the Azure environment






As a global admin for the Azure Directory that has appropriate permissions to manage an Enterprise application, you can assign users to applications. The only caveat is that the Azure Active Directory must be Azure Active Directory Premium P1 or Premium P2. To assign one or more users to an application directly, browse to the Azure portal as a global admin. We've already done that here as you can see on the screen. From here, open Azure Active Directory, and then select Enterprise applications. 

Select the application that you need to assign. In this case, we're going to assign box. And once it loads here, select users and groups. As you can see, we have no users or groups assigned to our box application yet. To do so, simply click the add user button at the top. And then from the add assignment blade, select users and groups. And then you can see all your users and groups that are available to you. In this case, I'm going to assign both the box users group that I created, and my own specific account to the application. Go ahead and click select. And from here, click assign. At this point, we've assigned our users and groups to the application. After a few moments, the users, and members of the groups that we added, should be able to launch the application that they have been assigned to.

About the Author
Learning Paths

Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.

In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.

In his spare time, Tom enjoys camping, fishing, and playing poker.