AZ-104 Azure Identity - LAB Perform Bulk Microsof Entra ID Operations in the Portal
Scenario
To help you walk through the lab, consider the following scenario:
You work as a systems administrator for an organization that has a lot of seasonal projects. As a result, it's very common for you to have to create and delete a large volume of users every few months throughout the year, as well as manage relevant security groups.
You have some spare time now before the project season begins, and you would like to investigate the use of bulk operations to help minimize your workload during these seasonal high peaks.
To get started, you would like to practice the following operations within your empty demo Microsoft Entra ID tenant:
- Creating and deleting users in bulk
- Managing group membership in bulk
Lab Setup
The objectives for this hands-on lab can be completed using the Azure portal. Specifically, all tasks will be performed using the Microsoft Entra ID service pages.
Solution
Bulk Create Users
Download and Edit the Template Used to Bulk Create Users
-
In the Azure portal, click the hamburger icon at the top-left of the screen to open the menu.
-
From the menu, select Microsoft Entra ID.
-
From the menu on the left, select Users.
-
From the menu at the top, click the Bulk operations drop-down.
-
Click Bulk create.
-
In the Bulk create user pane that displays on the right, click the Download button to download the latest CSV template.
-
Navigate to and open the CSV template file that was downloaded.
-
View the fields included in the template. Take note of any required fields and the total number of fields, as you will need to include some sort of information for each field.
Note: The template provided from Microsoft may be updated over time, and the fields included in the template (both required and optional) are subject to change. For that reason, we cannot provide you with a list of fields and the information to include or a mocked up file to be uploaded.
-
Enter information for the three new users you want to add, including data for — at minimum — each of the required fields.
-
The required fields likely include the user's name that is aligned with their Name and a username (in the form of an email address) that is aligned with their User Principal Name in AD.
-
To obtain the proper domain for the User Principal Name field, navigate back to the Azure portal and click on a user in the All users list; where their User Principal Name is listed, copy the domain following the
@symbol (including the@symbol), and paste it into the template for each user you create. -
The remaining fields will need to be accounted for in the template with a comma.
-
Do not include spaces between the commas and the field data. Spaces between them will cause the upload and bulk creation process to fail.
-
For example, at the time this lab was made, an entry in the template included the following fields:
[First Name] [Last Name],[username]@[userPrincipalName],[password],No,,,,,,,,,,,,,Amos Smith,[email protected],password123!,No,,,,,,,,,,,,,
-
-
Once you have entered the users to be added, save your changes to the file.
Upload Your Edited File and Execute the Bulk Create User Process
-
Back in the Azure portal, in the Bulk create user pane on the right, click the folder icon next to the Upload your csv file field.
Note: If you navigated away from the page to copy the domain name for the users while editing the template, you may need to navigate back to the All users page and then click Bulk operations > Bulk create to open the pane again.
-
Navigate to the location of your edited template file and select it.
-
If there are any issues with the data in the file, you will receive a notification of the errors in the Bulk create user pane. If any exist, fix the errors, save the file, and upload it again.
Note: You may have to repeat this process until your file has no errors.
-
When your file has uploaded successfully, click the Submit button.
Note: It may take some time to create your users.
-
You will receive a status notification about the creation process in the Bulk create user pane.
Note: If there are any issues during the creation process, you can click Bulk operation results in the menu on the left, click on your file in the list, and view the errors it encountered.
-
From the menu at the top, click Refresh and verify that the new users now appear in the list of All users.
Bulk Delete Users
Download and Edit the Template Used to Bulk Delete Users
-
From the menu at the top, click the Bulk operations drop-down.
-
Click Bulk delete.
-
In the Bulk delete user pane that displays on the right, click the Download button to download the latest CSV template.
-
Navigate to and open the CSV template file that was downloaded.
-
View the fields included in the template. Take note of any required fields and the total number of fields, as you will need to include some sort of information for each field.
-
Enter information for the user you want to delete, including data for the required field.
-
The required fields likely include the username that is aligned with their User Principal Name in AD.
-
For example, at the time this lab was made, an entry in the template included the following fields:
[username]@[userPrincipalName]
-
-
Once you have entered the user to be deleted, save your changes to the file.
Upload Your Edited File and Execute the Bulk Delete User Process
-
Back in the Azure portal, in the Bulk delete user pane on the right, click the folder icon next to the Upload your csv file field.
Note: If you navigated away from the page to copy the User Principal Name for the user while editing the template, you may need to navigate back to the All users page and then click Bulk operations > Bulk delete to open the pane again.
-
Navigate to the location of your edited template file and select it.
-
If there are any issues with the data in the file, you will receive a notification of the errors in the Bulk delete user pane. If any exist, fix the errors, save the file, and upload it again.
-
Once your file has uploaded successfully, type
Yesin the Are you sure you want to perform the delete operation? field. -
Click the Submit button.
-
You will receive a status notification about the deletion process in the Bulk delete user pane.
Note: If there are any issues during the deletion process, you can click Bulk operation results in the menu on the left, click on your file in the list, and view the errors it encountered.
-
From the menu at the top, click Refresh and verify that the user has been removed from the list of All users.
Bulk Add Group Members
Create the Group
-
Using the breadcrumb trail at the top, navigate back to the Microsoft Entra ID tenant.
-
From the menu on the left, select Groups.
-
From the menu at the top, click New group.
-
From the Group type drop-down, select Security.
-
In the Group name field, enter a name for the group.
-
Leave everything else as is, and click Create.
Download and Edit the Template Used to Bulk Import Members
-
In the list of groups in the All groups view, click on the name of the Security group you created.
-
From the menu on the left, select Members.
-
From the menu at the top, click the Bulk operations drop-down.
-
Click Import members.
-
In the Bulk import group pane that displays on the right, click the Download button to download the latest CSV template.
-
Navigate to and open the CSV template file that was downloaded.
-
View the fields included in the template. Take note of any required fields and the total number of fields, as you will need to include some sort of information for each field.
-
Enter information for the users you want to add to the group, including data for the required field.
-
The required fields likely include the user's Object ID or the username that is aligned with their User Principal Name in AD.
-
For example, at the time this lab was made, an entry in the template included the following fields:
[username]@[userPrincipalName]or
[memberObjectID]dec3f879-9439-4978-94be-17f17cefc0aa
Note: You can quickly find this information for each user within the All users view in the portal. Modify the view by clicking on Manage view in the top menu and then select Edit columns. Select only the User principal name and Object ID options (Object ID may need to be added), and click OK. Now, the User Principal Name and Object ID are displayed for each user, which you can then copy and paste into your CSV file.
-
-
Once you have entered the users to be added to the group, save your changes to the file.
Upload Your Edited File and Execute the Bulk Import Group Process
-
Back in the Azure portal, in the Bulk import group pane on the right, click the folder icon next to the Upload your csv file field.
Note: If you navigated away from the page to copy the User Principal Name or Object ID for the users while editing the template, you may need to navigate back to the All groups page, then click Members in the menu on the left, and then click Bulk operations > Import members to open the pane again.
-
Navigate to the location of your edited template file and select it.
-
If there are any issues with the data in the file, you will receive a notification of the errors in the Bulk import group pane. If any exist, fix the errors, save the file, and upload it again.
-
When your file has uploaded successfully, click the Submit button.
-
You will receive a status notification about the import process in the Bulk import group pane.
Note: If there are any issues during the import process, you can click Bulk operation results in the menu on the left, click on your file in the list, and view the errors it encountered.
-
From the menu at the top, click Refresh and verify that the users now appear in the list of Members.
No Comments