Describing how hybrid identity works within Azure AD
In order to be able to configure hybrid identities and synchronization in Azure AD and on-premises, you will need to have the Global Administrator role or the Hybrid Identity Administrator role within the Azure AD tenant and the Domain Enterprise Administrator role within the on-premises Windows Active Directory tenant. In this section, we will explain, in more detail, the differences between these two directory services.
Before we discuss the implementation of hybrid identity, it is important to understand what it is and why it is necessary. The following sections will provide this information.
Hybrid identity
The term hybrid identity is meant to signify that the company has users that use on-premises resources and users that use cloud-native resources. Within this hybrid identity infrastructure, there is going to be an on-premises Windows Active Directory domain controller that is used to manage the on-premises users....