About This Domain
Domain 1 — Manage Azure Identities and Governance — accounts for 20-25% of the AZ-104 certification exam. This domain evaluates your understanding of manage entra id users, groups, and device settings, manage role assignments and custom rbac roles, manage subscriptions and resource governance, and related concepts. Manage Microsoft Entra users and groups, configure subscriptions, implement Azure Policy, and manage RBAC. To pass this section you need practical knowledge of how these services and patterns work together in real-world architectures.
What You'll Be Tested On
- Manage Entra ID users, groups, and device settings
- Manage role assignments and custom RBAC roles
- Manage subscriptions and resource governance
- Configure Azure Policy and resource locks
Key Azure Services in This Domain
Study Strategy for Domain 1
While 20-25% might seem like a smaller portion of the exam, every point counts toward the passing score. Focus on understanding core concepts and common exam scenarios for this domain. Don't neglect it — even a few missed questions here can make the difference between pass and fail.
Exam Tips for Domain 1
Understand the scope hierarchy: management group → subscription → resource group → resource.
Custom roles require Microsoft.Authorization/roleDefinitions/write permission.
Azure Policy evaluates resources on creation and during compliance scans.
Frequently Asked Questions
How many questions on the AZ-104 exam come from Domain 1?
Domain 1 (Manage Azure Identities and Governance) makes up 20-25% of the AZ-104 exam. The exam has 65 scored questions, so approximately 13 questions will come from this domain.
What services should I focus on for Domain 1?
The key services for this domain include Entra ID, RBAC, Governance, Cost Management. Make sure you understand how each service works, its use cases, and how they integrate with one another.
How should I prepare for Manage Azure Identities and Governance questions?
Start by reviewing the key topics listed above, then practice with domain-specific questions. Focus on understanding real-world scenarios rather than memorizing facts. Use our practice quizzes to test your knowledge and review explanations for any questions you get wrong.
What's the best order to study the AZ-104 domains?
Many candidates start with the highest-weighted domains first. For the AZ-104 exam, the domains in order of weight are: Manage Azure Identities and Governance (20-25%), Implement and Manage Storage (15-20%), Deploy and Manage Azure Compute Resources (20-25%), Implement and Manage Virtual Networking (15-20%), Monitor and Maintain Azure Resources (10-15%). However, start with whichever domain aligns best with your existing experience.
Practice Domain 1 Questions
Test your knowledge of Manage Azure Identities and Governance with practice questions from our AZ-104 question bank.
Start Practice Quiz →