1Manage Identities and Governance

• 1.1Microsoft Entra ID Fundamentals

  Understand Microsoft Entra ID (formerly Azure AD): tenants, users, groups, app registrations, and authentication with MFA / Conditional Access. The starting point for "Manage identities and governance" in AZ-104.

• 1.2Role-Based Access Control (RBAC)

  Understand Azure RBAC role assignments (security principal + role definition + scope), built-in roles, inheritance through the scope hierarchy, and least privilege.

• 1.3Subscriptions and Governance

  Understand the resource hierarchy (management group → subscription → resource group → resource) and governance basics: Azure Policy enforcement, tags, and resource locks.