Identity, access and security
Users, groups, roles, MFA, Conditional Access, app registrations and identity protection in Microsoft Entra ID.
25 lessons5 modules about 2 hours IT admins Certificate
Part of:Microsoft 365 AdministratorMicrosoft Security & Compliance
25 hands-on lessons
Earn your Microsoft Entra Admin Center certificate
Finish all 25 lessons, then pass the 20-question final exam (80% to pass). Your certificate has a public link anyone can verify.
The tenant, user accounts, guests, groups and the free security baseline.
Tenants, domains and where everything lives.
New users, usage location and creating accounts in bulk.
Block sign-in, reset a password, revoke sessions and undo a deletion.
Invite partners and control who can invite them, and from where.
Pick the right type of group and set it up.
The free, one-switch baseline, and when you outgrow it.
Dynamic groups, licensing, delegated administration, roles and devices.
Groups that fill themselves from user and device attributes.
Assign licenses to groups instead of people.
Delegate admin rights for just part of the directory.
Choose the smallest built-in role that gets the job done.
Join types, device settings, BitLocker keys and LAPS.
Sign-in methods, self-service reset, Conditional Access and the logs that explain it all.
Passkeys, Authenticator, Temporary Access Pass, and why SMS is a last resort.
Let users fix forgotten passwords themselves, safely.
Assignments, conditions, access controls and report-only mode.
Build the classic require-MFA policy for admins, step by step.
Find out who signed in, why it failed and who changed what.
Location and device conditions, safe rollout, risk-based policies, PIM and access reviews.
Named locations, blocking legacy protocols and requiring compliant devices.
Never lock yourself out of your own tenant.
Detect compromised accounts and respond automatically.
Eligible roles, just-in-time activation and approval.
Recertify who still needs access, and grant access that expires.
Single sign-on, app registrations, consent and syncing on-premises AD.
Add SaaS apps, assign users and set up SSO.
Application objects, credentials and API permissions.
Control which apps users can let in to your data.
Sync on-premises AD and choose how users authenticate.
25 hands-on lessons
Earn your Microsoft Entra Admin Center certificate
Finish all 25 lessons, then pass the 20-question final exam (80% to pass). Your certificate has a public link anyone can verify.
The tenant, user accounts, guests, groups and the free security baseline.
Tenants, domains and where everything lives.
New users, usage location and creating accounts in bulk.
Block sign-in, reset a password, revoke sessions and undo a deletion.
Invite partners and control who can invite them, and from where.
Pick the right type of group and set it up.
The free, one-switch baseline, and when you outgrow it.
Dynamic groups, licensing, delegated administration, roles and devices.
Groups that fill themselves from user and device attributes.
Assign licenses to groups instead of people.
Delegate admin rights for just part of the directory.
Choose the smallest built-in role that gets the job done.
Join types, device settings, BitLocker keys and LAPS.
Sign-in methods, self-service reset, Conditional Access and the logs that explain it all.
Passkeys, Authenticator, Temporary Access Pass, and why SMS is a last resort.
Let users fix forgotten passwords themselves, safely.
Assignments, conditions, access controls and report-only mode.
Build the classic require-MFA policy for admins, step by step.
Find out who signed in, why it failed and who changed what.
Location and device conditions, safe rollout, risk-based policies, PIM and access reviews.
Named locations, blocking legacy protocols and requiring compliant devices.
Never lock yourself out of your own tenant.
Detect compromised accounts and respond automatically.
Eligible roles, just-in-time activation and approval.
Recertify who still needs access, and grant access that expires.
Single sign-on, app registrations, consent and syncing on-premises AD.
Add SaaS apps, assign users and set up SSO.
Application objects, credentials and API permissions.
Control which apps users can let in to your data.
Sync on-premises AD and choose how users authenticate.
Unlock every lesson, exam and certificate
The Basics module is free. IT Pro unlocks the intermediate and advanced lessons, from $12.42/month.