When using Azure subscriptions, you need a way to let other people access them and work with them. When a subscription is created, you automatically have access to an Azure AD directory, which handles identity functionalities such as authentication, access management, and security features (including MFA, conditional access, and service principals). In this section, you will learn the basics of user management, including the differences between the directory and guest users.
Before we get started, there is one topic that is really important from a user management perspective – tenants. When you create an Azure subscription, an Azure AD tenant is created along with it, with your account attached as the global administrator. You can think of a tenant as a catalogue of users inside an organization. Each Azure subscription is linked to a single tenant. This is a one-to-many relationship (one tenant, multiple subscriptions).
The confusion...
