Domain 1 · 20-25% of Exam

Manage Azure Identities and Governance

Manage Microsoft Entra users and groups, configure subscriptions, implement Azure Policy, and manage RBAC.

What You'll Be Tested On

  • Manage Entra ID users, groups, and device settings
  • Manage role assignments and custom RBAC roles
  • Manage subscriptions and resource governance
  • Configure Azure Policy and resource locks

Key AWS Services in This Domain

Exam Tips for Domain 1

💡

Understand the scope hierarchy: management group → subscription → resource group → resource.

💡

Custom roles require Microsoft.Authorization/roleDefinitions/write permission.

💡

Azure Policy evaluates resources on creation and during compliance scans.

Practice Domain 1 Questions

Test your knowledge of Manage Azure Identities and Governance with practice questions from our AZ-104 question bank.

Start Practice Quiz →

Other AZ-104 Domains