Merge pull request #49662 from wwlpublish/4fd68b6568852326bf9a3d0019ecee55ea0279e599d324285baaf6b13c927fb9-live

v-ccolin · web-flow · commit 34554ea2fc84 · 2025-03-30T10:05:22.000+01:00
Modules/M05-get-started-identity-access-labs
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/1-introduction.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/1-introduction.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.introduction
+title: Introduction
+metadata:
+  title: Introduction
+  description: "Introduction."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 1
+content: |
+  [!include[](includes/1-introduction.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/2-create-user.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/2-create-user.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.create-user
+title: Perform basic User Management tasks
+metadata:
+  title: Perform basic User Management tasks
+  description: "Perform labs to learn about creating users and assigning them access rights."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 15
+content: |
+  [!include[](includes/2-create-user.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/3-create-group.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/3-create-group.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.create-group
+title: Perform basic Group Management tasks
+metadata:
+  title: Perform basic Group Management tasks
+  description: "Perform labs to create groups, assign users, and grant access."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 15
+content: |
+  [!include[](includes/3-create-group.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/4-configure-password-protect.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/4-configure-password-protect.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.configure-password-protection
+title: Perform basic Password Protection tasks
+metadata:
+  title: Perform basic Password Protection tasks
+  description: "Perform an interactive lab to configure and enable password protection features."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 5
+content: |
+  [!include[](includes/4-configure-password-protect.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/5-configure-password-reset.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/5-configure-password-reset.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.configure-password-reset
+title: Perform basic Self-Service Password Reset (SSPR) tasks
+metadata:
+  title: Perform basic Self-Service Password Reset (SSPR) tasks
+  description: "Perform this interactive lab to enable and configure basics features of SSPR."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 5
+content: |
+  [!include[](includes/5-configure-password-reset.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/6-add-multifactor-authentication.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/6-add-multifactor-authentication.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.add-multifactor-authentication
+title: Perform basic Multifactor Authentication tasks
+metadata:
+  title: Perform basic Multifactor Authentication tasks
+  description: "Perform the lab to enable multifactor authentication to protect users and company data."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 10
+content: |
+  [!include[](includes/6-add-multifactor-authentication.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/7-create-conditional-access-policy.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/7-create-conditional-access-policy.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.create-conditional-access-policy
+title: Perform basic Conditional Access policy tasks
+metadata:
+  title: Perform basic Conditional Access policy tasks
+  description: "Perform the lab to explore creating and evaluating the impact of Conditional Access policies."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 10
+content: |
+  [!include[](includes/7-create-conditional-access-policy.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/8-knowledge-check.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/8-knowledge-check.yml
@@ -0,0 +1,60 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.knowledge-check
+title: Knowledge check
+metadata:
+  title: Knowledge check
+  description: "Check your knowledge."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 3
+content: |
+  [!include[](includes/8-knowledge-check.md)]
+quiz:
+  title: "Check your knowledge"
+  questions:
+  - content: "The goal is to create a new user in Microsoft Entra ID. What is the first step to take?"
+    choices:
+    - content: "Browse to Identity > Users > All users."
+      isCorrect: false
+      explanation: "Incorrect. This is the second step after signing in to the Microsoft Entra admin center."
+    - content: "Select New user > Create new user."
+      isCorrect: false
+      explanation: "Incorrect. This is the third step after browsing to the All users page."
+    - content: "Sign in to the Microsoft Entra admin center as at least a User Administrator."
+      isCorrect: true
+      explanation: "Correct. The first step is to sign in to the Microsoft Entra admin center with the appropriate role."
+  - content: "What is the first step to add a license to a user in Microsoft Entra ID?"
+    choices:
+    - content: "Sign in to the Microsoft 365 admin center as at least a License Administrator."
+      isCorrect: true
+      explanation: "Correct. The first step is to sign in to the Microsoft 365 admin center with the appropriate administrative role."
+    - content: "Navigate to Billing > Licenses."
+      isCorrect: false
+      explanation: "Incorrect. This is the second step. The first step is to sign in to the Microsoft 365 admin center."
+    - content: "Select the license to assign."
+      isCorrect: false
+      explanation: "Incorrect. This is the third step. The first step is to sign in to the Microsoft 365 admin center."
+  - content: "An identity and access administrator needs to invite an external user to collaborate on a project. What is the first step to take?"
+    choices:
+    - content: "Send an email invitation directly from the admin's email client."
+      isCorrect: false
+      explanation: "Incorrect. Invitations should be sent through the Microsoft Entra admin center to ensure proper tracking and management."
+    - content: "Sign in to the Microsoft Entra admin center as at least a User Administrator."
+      isCorrect: true
+      explanation: "Correct. The first step is to sign in to the Microsoft Entra admin center with the necessary permissions to invite external users."
+    - content: "Create a new user account for the external user."
+      isCorrect: false
+      explanation: "Incorrect. There is no need to create a new user account; instead, invite the external user to use their existing account."
+  - content: "An identity and access admin needs to assign a role to a user in Microsoft Entra. What is the first step to take?"
+    choices:
+    - content: "Sign in to the Microsoft Entra admin center."
+      isCorrect: true
+      explanation: "Correct. The first step in assigning a role in Microsoft Entra is to sign in to the Microsoft Entra admin center."
+    - content: "Navigate to the Azure portal."
+      isCorrect: false
+      explanation: "Incorrect. Role assignments in Microsoft Entra are managed through the Microsoft Entra admin center, not the Azure portal."
+    - content: "Create a new user account."
+      isCorrect: false
+      explanation: "Incorrect. Creating a new user account isn't the first step in assigning a role. Sign in to the Microsoft Entra admin center first."
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/9-summary-resources.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/9-summary-resources.yml
@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.get-started-identity-access-labs.summary-resources
+title: Summary and resources
+metadata:
+  title: Summary and resources
+  description: "Summary and resources."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: unit
+durationInMinutes: 1
+content: |
+  [!include[](includes/9-summary-resources.md)]
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/1-introduction.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/1-introduction.md
@@ -0,0 +1,21 @@
+Welcome to the Microsoft Entra interactive labs! These beginner-level labs are designed to guide you through the entry-level identity and access management features of Microsoft Entra. Over the course of six labs, you'll gain experience with creating users and groups, and assigning roles. Additionally you utilize key features like Multifactor Authentication (MFA), Self-Service Password Reset (SSPR), and Conditional Access. Each lab is structured to provide step-by-step instructions, ensuring that you can follow along easily and build your skills progressively.
+
+### Scenario
+
+Imagine you joined Contoso, a leading technology company, as an entry-level identity and access management specialist. Your primary responsibility is to ensure that employees have the appropriate access to the resources they need while maintaining the security of the company's systems.
+
+In your first month, you're setting up user accounts, creating groups, assigning roles. Then you start to configure access to security features such as Multifactor Authentication (MFA), and Self-Service Password Reset (SSPR). Finally you explore Conditional Access. These tasks are crucial for protecting sensitive information and ensuring that only authorized personnel can access specific resources.
+
+Through these interactive labs, you'll learn how to perform these tasks step-by-step, gaining the skills and confidence needed to excel in your new role at Contoso. By the end of the labs, you'll be well-equipped to manage identities and access within Microsoft Entra, contributing to the overall security and efficiency of your organization.
+
+Let's get started and explore the capabilities of Microsoft Entra together!
+
+## Learning objectives
+
+In this module, you'll:
+ - Perform basic user management.
+ - Perform basic group management.
+ - Configure basic password protection.
+ - Configure Self-Service Password Reset (SSPR).
+ - Enable basic multifactor authentication (MFA).
+ - Create a basic conditional access policy.
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/2-create-user.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/2-create-user.md
@@ -0,0 +1,6 @@
+
+
+
+In your new role at Contoso, you're tasked with managing user accounts. You ensure that employees and external partners have the necessary access to company resources. Your first assignment involves creating a new user account, adding a license to enable access to essential services. Next, you're inviting an external user to collaborate on a project. After that, you assign a specific role to a user to grant appropriate permissions. Finally, you perform a bulk import of users and user data to streamline the onboarding process. These tasks are fundamental to maintaining an organized and secure identity management system within Microsoft Entra.
+
+[Start the lab](https://microsoftlearning.github.io/APL-0501-Get-started-Microsoft-Entra-Management-Tasks/Instructions/Labs/01-perform-basic-user-management.html)
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/3-create-group.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/3-create-group.md
@@ -0,0 +1,5 @@
+
+
+As you continue your journey at Contoso, your next task involves managing groups to efficiently organize users and streamline access to resources. In this lab, you create a security group and a Microsoft 365 group. These groups ensure that users are properly categorized based on their roles and responsibilities. You add users to these groups and assign licenses to ensure they have access to the necessary resources. Group management tasks are essential for maintaining a structured and secure environment within Microsoft Entra. This allows you to manage permissions and resources more effectively.
+
+[Start the lab](https://microsoftlearning.github.io/APL-0501-Get-started-Microsoft-Entra-Management-Tasks/Instructions/Labs/02-perform-basic-group-management.html)
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/4-configure-password-protect.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/4-configure-password-protect.md
@@ -0,0 +1,5 @@
+
+
+As you progress in your role at Contoso, you're now responsible for enhancing the security of user accounts by implementing password protection measures. In this lab, you enable the password protection feature in Microsoft Entra. You need to set lockout values to prevent unauthorized access attempts. Next you review custom banned passwords to ensure that users create strong and secure passwords. These steps are crucial for safeguarding sensitive information and maintaining the integrity of the company's systems. 
+
+[Start the lab](https://microsoftlearning.github.io/APL-0501-Get-started-Microsoft-Entra-Management-Tasks/Instructions/Labs/03-perform-basic-password-protection.html)
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/5-configure-password-reset.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/5-configure-password-reset.md
@@ -0,0 +1,5 @@
+
+
+As you continue to enhance the security measures at Contoso, your next task is to configure and enable Self-Service Password Reset (SSPR). This feature allows users to reset their passwords independently, reducing the workload on the IT support team. This change improves overall security and efficiency. In this lab, you enable SSPR, configure the necessary settings, and ensure that only the designated users have access. By implementing SSPR, you empower users to manage their passwords securely and conveniently.
+
+[Start the lab](https://microsoftlearning.github.io/APL-0501-Get-started-Microsoft-Entra-Management-Tasks/Instructions/Labs/04-perform-basic-sspr-tasks.html)
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/6-add-multifactor-authentication.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/6-add-multifactor-authentication.md
@@ -0,0 +1,5 @@
+
+
+As you advance in your role at Contoso, you're now responsible for managing Multifactor Authentication (MFA) settings to enhance the security of user accounts. In this lab, you enable and disable per-user MFA settings. Enabling MFA ensures users have an extra layer of protection when accessing company resources. You review MFA settings such as Trusted IPs to allow secure access from specific locations. Finally, you configure MFA lockout settings to prevent unauthorized access attempts and protect sensitive information. These tasks are crucial for maintaining a secure and resilient identity management system within Microsoft Entra.
+
+[Start the lab](https://microsoftlearning.github.io/APL-0501-Get-started-Microsoft-Entra-Management-Tasks/Instructions/Labs/05-perform-basic-mfa-tasks.html)
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/7-create-conditional-access-policy.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/7-create-conditional-access-policy.md
@@ -0,0 +1,5 @@
+
+
+As you wrap up your initial onboarding at Contoso, your final task involves configuring Conditional Access policies. Policies enhance security and control access to company resources. In this lab, you create a new Conditional Access policy to prevent users from accessing Microsoft Sway. Your goal is to ensure that only authorized personnel can use this application. Additionally, you use the "What If" analysis tool to simulate the potential outcome of your policy changes. A what if analysis, allows you to understand and fine-tune a policy before it goes live. These steps are essential for maintaining a secure and compliant environment within Microsoft Entra.
+
+[Start the lab](https://microsoftlearning.github.io/APL-0501-Get-started-Microsoft-Entra-Management-Tasks/Instructions/Labs/06-perform-basic-conditional-access.html)
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/8-knowledge-check.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/8-knowledge-check.md
@@ -0,0 +1,3 @@
+
+
+Choose the best response for each of the questions below.
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/includes/9-summary-resources.md b/learn-pr/wwl-azure/get-started-identity-access-labs/includes/9-summary-resources.md
@@ -0,0 +1,20 @@
+
+
+After completing this lab module, you're able to:
+
+- Create a user and assign them resource like role and licenses.
+- Create a group and add users to it.
+- Configure Self-Service Password Reset (SSPR).
+- Configure Multifactor Authentication (MFA).
+- Deploy a conditional access policy.
+
+## Resources
+
+To learn more about the technology in these labs, check out the following links:
+
+- [How to create and invite users](/entra/fundamentals/how-to-create-delete-users)
+- [How to manage Microsoft groups and group membership](/entra/fundamentals/how-to-manage-groups)
+- [How to enable Microsoft Entra password protection](/entra/identity/authentication/howto-password-ban-bad-on-premises-operations)
+- [How to enable self-service password reset](/entra/external-id/customers/how-to-enable-password-reset-customers)
+- [What is Microsoft Entra authentication](/entra/identity/authentication/overview-authentication)
+- [How to Build a Conditional Access policy](/entra/identity/conditional-access/concept-conditional-access-policies)
diff --git a/learn-pr/wwl-azure/get-started-identity-access-labs/index.yml b/learn-pr/wwl-azure/get-started-identity-access-labs/index.yml
@@ -0,0 +1,51 @@
+### YamlMime:Module
+uid: learn.wwl.get-started-identity-access-labs
+metadata:
+  title: Get Started with Identity and Access Labs
+  description: "Use interactive labs to explore the basics of identity and access using Microsoft Entra ID."
+  ms.date: 03/29/2025
+  author: wwlpublish
+  ms.author: roberts
+  ms.topic: module
+  ms.service: entra
+  ms.subservice: identity-platform-1p
+  ai-usage: human-only
+title: Get started with identity and access labs
+summary: Explore the basic usage of Microsoft Entra ID using these interactive labs to create identities and control their access to resources within your cloud.
+abstract: |
+  After completing this module, you'll be able to:
+
+  -   Perform basic user management.
+
+  -   Perform basic group management.
+
+  -   Configure basic password protection.
+
+  -   Configure Self-Service Password Reset (SSPR).
+
+  -   Enable basic multifactor authentication (MFA).
+
+  -   Create a basic conditional access policy.
+prerequisites: '-   General usability experience with Azure or Microsoft Entra admin tools.'
+iconUrl: /training/achievements/generic-badge.svg
+levels:
+- beginner
+roles:
+- administrator
+- identity-access-admin
+products:
+- entra
+subjects:
+- identity-access
+units:
+- learn.wwl.get-started-identity-access-labs.introduction
+- learn.wwl.get-started-identity-access-labs.create-user
+- learn.wwl.get-started-identity-access-labs.create-group
+- learn.wwl.get-started-identity-access-labs.configure-password-protection
+- learn.wwl.get-started-identity-access-labs.configure-password-reset
+- learn.wwl.get-started-identity-access-labs.add-multifactor-authentication
+- learn.wwl.get-started-identity-access-labs.create-conditional-access-policy
+- learn.wwl.get-started-identity-access-labs.knowledge-check
+- learn.wwl.get-started-identity-access-labs.summary-resources
+badge:
+  uid: learn.wwl.get-started-identity-access-labs.badge
