Lesson 2 of 414 min

Azure administration

RBAC (Role-Based Access Control), Azure AD (Active Directory) Connect/Cloud Sync, Azure Files, Azure Backup, Azure Arc.

Organizational directory structure on a laptop screen — Photo by Christina Morillo on Pexels

Azure RBAC: assign roles to users/groups at a scope (subscription, RG (Resource Group), resource). Built-ins like Reader, Contributor, Owner cover most cases.

Hybrid identity: Azure AD Connect (legacy) or Cloud Sync (modern) syncs on-prem AD users to Entra ID.

Diagram · Cloud service models

Azure Backup protects on-prem AND cloud workloads. Azure Arc extends Azure management to non-Azure servers.

Key takeaways

▸RBAC scope matters — narrowest wins
▸Cloud Sync is the modern hybrid identity tool
▸Arc extends governance to anything

Next: AWS Cloud Practitioner mindset →