Book Image

Learn Azure Administration

By : Kamil Mrzygłód
Book Image

Learn Azure Administration

By: Kamil Mrzygłód

Overview of this book

Microsoft Azure is one of the upcoming cloud platforms that provide cost-effective solutions and services to help businesses overcome complex infrastructure-related challenges. This book will help you scale your cloud administration skills with Microsoft Azure. Learn Azure Administration starts with an introduction to the management of Azure subscriptions, and then takes you through Azure resource management. Next, you'll configure and manage virtual networks and find out how to integrate them with a set of Azure services. You'll then handle the identity and security for users with the help of Azure Active Directory, and manage access from a single place using policies and defined roles. As you advance, you'll get to grips with receipts to manage a virtual machine. The next set of chapters will teach you how to solve advanced problems such as DDoS protection, load balancing, and networking for containers. You'll also learn how to set up file servers, along with managing and storing backups. Later, you'll review monitoring solutions and backup plans for a host of services. The last set of chapters will help you to integrate different services with Azure Event Grid, Azure Automation, and Azure Logic Apps, and teach you how to manage Azure DevOps. By the end of this Azure book, you'll be proficient enough to easily administer your Azure-based cloud environment.
Table of Contents (15 chapters)
1
Section 1: Understanding the Basics
5
Section 2: Identity and Access Management
9
Section 3: Advanced Topics

Describing the user creation process

Since, internally, the process of user creation is quite complicated, let's stop for a moment and describe it. We can separate the process of creating it into the following steps:

  1. A user is created by an administrator or is invited if it is a guest user.
  2. A user record is created inside a tenant containing all the information that was configured in the previous step.
  3. Optionally, if a user comes from another tenant, an invitation email is sent containing a link for account activation.

Even if a user has not logged in yet, you still will be able to alter its record and assign different directory roles. The important distinction here is the concept of local and guest accounts – they offer a completely different feeling from an administrator perspective as they are covered by a different set of rules (for example, guest accounts are limited when it comes to giving access to a directory in terms of possible permissions).

Note that, by...