Azure AD object management
There are different types of objects stored in Azure AD, with each object fulfilling a specific role regarding identity and access. The main objects that we will be covering are the following:
- Users
- Groups
- Roles
- Service principals
At the end of this section, we will be completing some hands-on exercises to create and manage the different object types that we have discussed.
Azure AD users
We mentioned in previous sections of this chapter that the primary use case for Azure AD is to manage secure authenticated access to an organization's Microsoft cloud services and applications that support modern authentication protocols regardless of where they are hosted. For users to be able to access these services that are protected by Azure AD, they need a user account. There are two main types of user accounts in Azure AD – internal and external.
Internal user accounts are user identities created in the Azure AD tenant...
