AZ-104 Azure Identity - LAB Create and Manage Microsoft Entra ID Users in the Portal
Crate Azure users and groups in Entra ID
Scenario
To help you walk through the lab, consider the following scenario:
You work as a senior systems administrator, and the management of Microsoft Entra ID is one of your many responsibilities. As a senior team member, it's also important that you share your knowledge with other colleagues. Your manager has recently asked you to provide a walk through of basic user management tasks for a group of new Helpdesk team members.
Using an empty demonstration Microsoft Entra ID tenant you have configured, you are going to demonstrate the following:
- Creating a new user.
- Modifying existing user accounts.
- Revoking access for users.
- Deleting user accounts.
Lab Setup
The objectives for this hands-on lab can be completed using the Azure portal. Specifically, all tasks will be performed using the Microsoft Entra ID service pages.
Solution
Create Microsoft Entra ID User Accounts
-
In the Azure portal, click the hamburger icon at the top-left of the screen to open the menu.
-
From the menu, select Microsoft Entra ID.
-
From the menu on the left, select Users.
-
From the menu at the top, click New user, and then select Create new user.
-
In the User principal name field, enter a username for the first new user account. Leave the domain name as is.
-
In the Display name field, enter a first name and last name for the first new user account.
-
Click Next: Properties.
-
Scroll through and view some of the properties you can configure for a new user account. For the purposes of this hands-on lab, you do not need to configure any other properties for the new user account.
Note: Attempting to assign a role to your user may break your hands-on lab.
-
Click Review + Create.
-
Then, click Create.
-
Repeat steps 4 through 10 to create your second new user account.
-
From the menu at the top, click Refresh and verify that both user accounts you just created now appear in the All users list in your Microsoft Entra ID service.
Note: You may need to refresh the page a few times for the list to be updated.
Modify a Microsoft Entra ID User Account
-
From the All users list, select one of the users you just created to open their profile.
-
View some of the options and settings that you can modify for a user account using the menu at the left.
-
If necessary, select Overview in the menu to return to the user's profile.
-
From the menu at the top, click Edit properties.
-
Modify some of the settings for the user, such as entering their First name and Last name or updating the information for their Job title.
-
Click Save.
-
From the menu at the top, click Reset password.
-
In the Reset password pane that displays on the right, click the Reset password button.
Note: This will generate a temporary password that must be changed on the next sign in. You would need to take note of the temporary password that is displayed and provide it to the user.
-
Click the X to close the Reset password pane.
Revoke Access to a Microsoft Entra ID User Account
-
From the menu at the top, click Revoke sessions.
Note: This will log the user out of any active sessions that they are currently logged into.
-
In the Do you want to revoke all sessions for the user? prompt, click Yes.
Delete a Microsoft Entra ID User Account
-
From the All users list, check the checkbox next to one of the users you created.
-
From the menu at the top, click Delete.
-
In the Delete the selected users? prompt, click OK.
-
From the menu at the top, click Refresh and verify that the user account has been removed from the accounts in the All users list.
Note: You may need to refresh the page a few times for the list to be updated.
-
From the menu on the left, select Deleted users. The user account you just deleted should appear in the list of deleted accounts.
Note: You may need to refresh the page a few times before the user you deleted appears in the list.
-
Check the checkbox for the user account and note that you could choose the Restore users or Delete permanently options from the menu at the top if you needed to take further action on the account.
Note: Users that have been deleted remain in the Deleted users list for 30 days.