Microsoft Entra ID (formerly Azure Active Directory)

Identity sprawl is one of the fastest ways for risk to enter an organization. Over-permissioned admins, unmanaged external guests, help desk queues full of password resets, and on-prem accounts that never sync cleanly to the cloud all widen the attack surface. This course gives IT Directors a structured way to build shared Microsoft Entra ID skills across the team.

Role fit: This Microsoft Entra ID course is built for systems administrators and IT practitioners with about a year of Azure AD/Entra exposure. Help desk staff gain value from the self-service password reset (SSPR) and user, group, and license modules. Team Leads gain value from governance, access packages, and Privileged Identity Management (PIM).

Time investment: The course runs about 9.5 hours across 11 skills. Most learners can finish it in two to three weeks alongside their normal workload. The PIM skill works well as a quick first assignment for teams focused on privileged access.

Risk and compliance framing: The course covers least privilege, just-in-time and time-bound admin access with approval workflows, sign-in troubleshooting, and audit log review. These are the controls auditors expect to see.

Change-management note: Videos use the legacy Azure AD name. The concepts and workflows still apply to Entra ID, but brief your team on the renaming before they start.

Hands-on practice: Trainers demonstrate in working lab tenants and recommend that learners mirror each step in a non-production Microsoft 365 or Azure environment. This approach builds practical confidence without touching production.

IT teams use this Microsoft Entra ID training to resolve the identity problems that drive help desk tickets, access sprawl, and security gaps across hybrid environments. The demonstrations follow real administrator work, such as syncing on-premises Active Directory accounts to the cloud with AD Connect, registering applications with the right authentication settings, and onboarding external partners who need project access without crossing security boundaries.

• Fewer password-reset escalations: Your team will enable Self-Service Password Reset (SSPR) for user groups, configure authentication methods and registration options, and test the full reset process so end users can recover access on their own.
• Safer external collaboration: Admins practice granting business partners and customers access to apps and data through groups and access packages. They apply least privilege so a single over-permissioned grant doesn't expose sensitive resources.
• Smoother application migrations: Teams use application discovery to classify Microsoft, line-of-business, and third-party cloud apps. They identify migration issues before integration and register custom apps with the right permissions and admin consent.
• Reduced privileged-access risk and faster troubleshooting: Your administrators will enable Privileged Identity Management for just-in-time, time-bound access with approval workflows. They will also troubleshoot sign-in activity, review audit logs, and document tenant activity for operational reporting.

The result for IT Directors is a team that runs Entra ID with consistent, documented practices. Access is easier to justify at audit time, and operations rely less on one-off fixes.

Knowledge

• How Microsoft Entra ID (formerly Azure AD) identity types work, including internal users, groups, and external identities for partners and customers
• How hybrid identity works, using Azure AD Connect (formerly DirSync) to synchronize on-premises Active Directory accounts to the cloud
• The authentication options available, from Microsoft Authenticator and PINs to Windows Hello fingerprint and picture password
• Identity governance concepts, including the principle of least privilege, access packages, and which features require P2 licensing
• The three enterprise app types — Microsoft cloud apps, line-of-business apps, and third-party cloud apps — and how app registration, permissions, and admin consent apply to each
• How Privileged Identity Management (PIM) supports just-in-time access, time-bound access, and approval workflows

Ability

• Enable and test Self-Service Password Reset (SSPR) for groups of users, which reduces help desk password tickets
• Manage users, groups, and licenses, including group membership settings, restoring deleted users, and reviewing audit logs
• Evaluate enterprise application types and plan how Microsoft cloud apps, line-of-business apps, and third-party cloud apps should connect to Microsoft Entra ID
• Register custom applications, assign API permissions and app roles, and grant admin consent for trusted apps
• Review device compliance and use Intune remote actions such as restart, Autopilot reset, and malware scans
• Troubleshoot sign-in activity and review operational and security data in Microsoft Entra admin experiences