Book Image

Administering Windows Server Hybrid Core Infrastructure AZ-800 Exam Guide

By : Steve Miles
Book Image

Administering Windows Server Hybrid Core Infrastructure AZ-800 Exam Guide

By: Steve Miles

Overview of this book

Written by an Azure MVP and Microsoft Certified Trainer with 20 years of experience in data center infrastructure, this AZ-800 study guide is an essential preparation tool for administrators who want to take the exam and acquire key skills that will help them thrive in their careers. This book will guide you through all the ways Windows Server can be used to manage hybrid solutions on-premises and in the cloud, starting with deploying and managing Active Directory Domain Services (AD DS) in on-premises and cloud environments. You’ll then dive into managing virtual machines and containers and progress to implementing and managing an on-premises and hybrid networking infrastructure. The later parts of the book focus on managing storage and file services, concluding with a detailed overview of all the knowledge needed to pass the AZ-800 exam with practical examples throughout the chapters. In the final chapter, you’ll be able to test your understanding of the topics covered with the help of practice exams to make sure that you’re completely prepared for the contents and structure of the exam. By the end of the book, you’ll have gained the knowledge, both practical and conceptual, that's required to administer Windows Server hybrid core infrastructure confidently.
Table of Contents (22 chapters)
1
Part 1: Hybrid Identity
6
Part 2: Hybrid Networking
9
Part 3: Hybrid Storage
12
Part 4: Hybrid Compute
18
Part 5: Exam Prep
19
Chapter 14: Exam Preparation Practice Tests

Managing access for Windows Server VMs in Azure

This section looks at the user access controls and network access methods for Windows Server Azure infrastructure-as-a-service (IaaS) VMs.

User access

User access to Azure IaaS VMs for management purposes is controlled through Azure role-based access control (Azure RBAC).

The following are the built-in default compute category roles:

  • Virtual Machine Administrator Login: This lets you manage the VM only. You are unable to access the VM, the virtual network, and any storage account(s) they’re connected to
  • Virtual Machine Contributor: This lets you view VMs in the portal and log in as a regular user.
  • Virtual Machine User Login: This lets you view VMs in the portal and log in as an administrator.

These roles are managed via the Access Control (IAM) blade for a VM resource; the following screenshot illustrates the Compute category roles shown in the Azure portal:

Figure 13.1 –...