# AZ-104 Azure Identity - LAB Create and Manage Microsoft Entra ID Users in the Portal

**[Crate Azure users and groups in Entra ID](https://learn.microsoft.com/en-us/training/modules/create-users-and-groups-in-azure-active-directory/)**

**Scenario**

To help you walk through the lab, consider the following scenario:

You work as a senior systems administrator, and the management of Microsoft Entra ID is one of your many responsibilities. As a senior team member, it's also important that you share your knowledge with other colleagues. Your manager has recently asked you to provide a **walk through** of basic user management tasks for a group of new Helpdesk team members.

Using an empty demonstration Microsoft Entra ID tenant you have configured, you are going to demonstrate the following:

<div class="css-xjv02e" id="bkmrk-creating-a-new-user."><div class="css-xjv02e"><div class="sc-kAyceB jjMCa-D" color="#C1C0D1">- Creating a new user.
- Modifying existing user accounts.
- Revoking access for users.
- Deleting user accounts.

---

</div></div></div>**Lab Setup**

The objectives for this hands-on lab can be completed using the Azure portal. Specifically, all tasks will be performed using the **Microsoft Entra ID** service pages.

<iframe allowfullscreen="allowfullscreen" height="452" src="https://www.youtube.com/embed/oRAUfSzj52w" style="width: 808px; height: 452px;" width="808"></iframe>

<details id="bkmrk-solution-create-micr"><summary>Solution</summary>

### Create Microsoft Entra ID User Accounts

1. In the Azure portal, click the hamburger icon at the top-left of the screen to open the menu.
2. From the menu, select **Microsoft Entra ID**.
3. From the menu on the left, select **Users**.
4. From the menu at the top, click **New user**, and then select **Create new user**.
5. In the **User principal name** field, enter a username for the first new user account. Leave the domain name as is.
6. In the **Display name** field, enter a first name and last name for the first new user account.
7. Click **Next: Properties**.
8. Scroll through and view some of the properties you can configure for a new user account. For the purposes of this hands-on lab, you do not need to configure any other properties for the new user account.
    
    > **Note:** Attempting to assign a role to your user may break your hands-on lab.
9. Click **Review + Create**.
10. Then, click **Create**.
11. Repeat steps **4** through **10** to create your second new user account.
12. From the menu at the top, click **Refresh** and verify that both user accounts you just created now appear in the **All users** list in your Microsoft Entra ID service.
    
    > **Note**: You may need to refresh the page a few times for the list to be updated.

### Modify a Microsoft Entra ID User Account

1. From the **All users** list, select one of the users you just created to open their profile.
2. View some of the options and settings that you can modify for a user account using the menu at the left.
3. If necessary, select **Overview** in the menu to return to the user's profile.
4. From the menu at the top, click **Edit properties**.
5. Modify some of the settings for the user, such as entering their **First name** and **Last name** or updating the information for their **Job title**.
6. Click **Save**.
7. From the menu at the top, click **Reset password**.
8. In the **Reset password** pane that displays on the right, click the **Reset password** button.
    
    > **Note:** This will generate a temporary password that must be changed on the next sign in. You would need to take note of the temporary password that is displayed and provide it to the user.
9. Click the **X** to close the **Reset password** pane.

### Revoke Access to a Microsoft Entra ID User Account

1. From the menu at the top, click **Revoke sessions**.
    
    > **Note**: This will log the user out of any active sessions that they are currently logged into.
2. In the **Do you want to revoke all sessions for the user?** prompt, click **Yes**.

### Delete a Microsoft Entra ID User Account

1. From the **All users** list, check the checkbox next to one of the users you created.
2. From the menu at the top, click **Delete**.
3. In the **Delete the selected users?** prompt, click **OK**.
4. From the menu at the top, click **Refresh** and verify that the user account has been removed from the accounts in the **All users** list.
    
    > **Note**: You may need to refresh the page a few times for the list to be updated.
5. From the menu on the left, select **Deleted users**. The user account you just deleted should appear in the list of deleted accounts.
    
    > **Note**: You may need to refresh the page a few times before the user you deleted appears in the list.
6. Check the checkbox for the user account and note that you could choose the **Restore users** or **Delete permanently** options from the menu at the top if you needed to take further action on the account.
    
    > **Note**: Users that have been deleted remain in the **Deleted users** list for 30 days.

</details>