You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: learn-pr/azure/manage-users-and-groups-in-aad/includes/2-create-aad.md
+7-4Lines changed: 7 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,10 +32,13 @@ You can also decide how the default directory is selected: last visited or a spe
32
32
33
33
## Create a new directory
34
34
35
+
> [!NOTE]
36
+
> You can accomplish many of these tasks in either the Azure portal or the Microsoft Entra admin center. For this tutorial, we'll use the Microsoft Entra admin center for most tasks, except where noted.
37
+
35
38
An organization (tenant) has one associated default Microsoft Entra directory. However, owners can create additional directories to support development or testing purposes, or because they want to have separate directories to synchronize with their local Windows Server AD forests.
36
39
37
40
> [!IMPORTANT]
38
-
> The steps to create a new directory follow; however, unless you're an owner of your Azure account, this option won't be available to you. The Azure Sandbox doesn't allow you to create new Microsoft Entra directories.
41
+
> The steps to create a new directory follow; however, unless you're an owner of your Azure account, this option isn't available to you. The Azure Sandbox doesn't allow you to create new Microsoft Entra directories.
39
42
40
43
1. Sign in to the [Azure portal](https://portal.azure.com?azure-portal=true).
41
44
@@ -51,13 +54,13 @@ An organization (tenant) has one associated default Microsoft Entra directory. H
51
54
52
55
-**Organization name**: Enter a name for the directory to help distinguish it from your other directories. The directory to be created will be used in production; provide a name that your users will recognize as your organization's name. You can change the name later if you want.
53
56
54
-
-**Initial domain name**: Enter a domain name associated with your organization. Azure will give a validation error unless the domain isn't known. The default domain name will always have the suffix `.onmicrosoft.com`. You can't change the default domain. If you choose to, you can add a custom domain owned by your organization so defined users can use a traditional company email, such as `[email protected]`.
57
+
-**Initial domain name**: Enter a domain name associated with your organization. An unknown or missing domain causes a validation error. The default domain name will always have the suffix `.onmicrosoft.com`. You can't change the default domain. If you choose to, you can add a custom domain owned by your organization so defined users can use a traditional company email, such as `[email protected]`.
55
58
56
-
-**Country or region**: Select the country/region in which the directory should reside. The country/region will identify the region and data center where the Microsoft Entra instance will live; you can't change it later.
59
+
-**Country or region**: Select the country/region in which the directory should reside. The country/region identifies the region and data center where the Microsoft Entra instance lives; you can't change it later.
57
60
58
61
59
62
60
-
1. Select **Create** to create the new directory. A free tier directory will be created where you can add users, create roles, register apps and devices, and control licenses.
63
+
1. Select **Create** to create the new directory. A free tier directory is created where you can add users, create roles, register apps and devices, and control licenses.
61
64
62
65
After you've created the directory, select **Click here to manage your new tenant** to go to the Overview dashboard that lets you control all directory aspects.
Copy file name to clipboardExpand all lines: learn-pr/azure/manage-users-and-groups-in-aad/includes/3-users.md
+11-8Lines changed: 11 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,26 +1,29 @@
1
1
Every user who needs access to Azure resources needs an Azure user account. Your user account contains all the information needed to authenticate you during the sign-in process. Once authenticated, Microsoft Entra ID builds an access token to authorize you, determine what resources you can access, and determine what you can do with those resources.
2
2
3
-
You can use the **Microsoft Entra ID** dashboard in the Azure portal to work with user objects. Keep in mind that you can only work with a single directory at a time, but you can use the **Directory + Subscription** pane to switch directories. The dashboard also has a **Manage tenants** button in the toolbar, which makes it easy to view all your directories and switch to another available directory.
3
+
The [Microsoft Entra admin center](https://entra.microsoft.com/) is a web-based identity portal for Microsoft Entra products. It provides a unified administrative experience for organizations and administrators to configure and manage their Microsoft Entra solutions in a centralized location.
4
+
5
+
In this exercise, you'll use the Microsoft Entra admin center to work with user objects. Keep in mind that you can only work with a single directory at a time, but you can use the **Directory + Subscription** pane to switch directories.
4
6
5
7
## View users
6
8
7
-
To view the Microsoft Entra users, in the left menu pane, under **Manage**, select **Users**. The **All Users** pane appears. Notice the **User type** and **Identities** columns, as shown in the following screenshot:
9
+
To view the Microsoft Entra users, select **Users**in the left pane, then select **All users**. The **All Users** pane appears. Notice the **User type** and **Identities** columns, as shown in the following screenshot:
8
10
9
11
10
12
11
13
Typically, Microsoft Entra ID defines users in three ways:
12
14
13
-
-**Cloud identities**: These users exist only in Microsoft Entra ID. Examples are administrator accounts and users that you manage yourself. Their source is **Microsoft Entra ID** or **External Microsoft Entra ID** if the user is defined in another Microsoft Entra instance, but needs access to subscription resources controlled by this directory. When these accounts are removed from the primary directory, they are deleted.
15
+
-**Cloud identities**: These users exist only in Microsoft Entra ID. Examples are administrator accounts and users that you manage yourself. Their source is **Microsoft Entra ID** or **External Microsoft Entra ID** if the user is defined in another Microsoft Entra instance, but needs access to subscription resources controlled by this directory. When these accounts are removed from the primary directory, they're deleted.
14
16
15
17
-**Directory-synchronized identities**: These users exist in an on-premises Active Directory. A synchronization activity that occurs via **Microsoft Entra Connect** brings these users in to Azure. Their source is **Windows Server AD**.
16
18
17
-
-**Guest users**: These users exist outside Azure. Examples are accounts from other cloud providers and Microsoft accounts, such as an Xbox LIVE account. Their source is **Invited user**. This type of account is useful when external vendors or contractors need access to your Azure resources. Once their help is no longer necessary, you can remove the account and all of their access.
19
+
-**Guest users**: These users exist outside Azure. Examples are accounts from other cloud providers and Microsoft accounts (such as an Xbox LIVE account). Their source is **Invited user**. This type of account is useful when external vendors or contractors need access to your Azure resources. Once their help is no longer necessary, you can remove the account and all of their access.
18
20
19
21
## Add users
20
22
21
23
You can add cloud identities to Microsoft Entra ID in multiple ways:
22
24
23
25
- Syncing an on-premises Windows Server Active Directory
26
+
- Using the Microsoft Entra admin center
24
27
- Using the Azure portal
25
28
- Using the command line
26
29
- Other options
@@ -29,19 +32,19 @@ You can add cloud identities to Microsoft Entra ID in multiple ways:
29
32
30
33
Microsoft Entra Connect is a separate service that allows you to synchronize a traditional Active Directory with your Microsoft Entra instance. This is how most enterprise customers add users to the directory. The advantage to this approach is users can use single sign-on (SSO) to access local and cloud-based resources.
31
34
32
-
### Use the Azure portal
35
+
### Use the Microsoft Entra admin center
33
36
34
-
You can manually add new users through the Azure portal. This is the easiest way to add a small set of users. You need to be in the **User Administrator** role to perform this function.
37
+
You can manually add new users through the Microsoft Entra admin center. This is the easiest way to add a small set of users. You need to be in the **User Administrator** role to perform this function.
35
38
36
-
1. To add a new user with the Azure portal, in the top menu bar, select **New user**, then select **Create new user**.
39
+
1. To add a new user, select **New user**in the top menu bar, then select **Create new user**.
37
40
38
41
39
42
40
43
1. In addition to **Name** and **User name**, you can add profile information, like **Job Title** and **Department**, on the **Properties** tab.
41
44
42
45
43
46
44
-
The default behavior is to create a new user in the organization. The user will have a username with the default domain name assigned to the directory such as [email protected].
47
+
The default behavior is to create a new user in the organization. The user will have a username with the default domain name assigned to the directory, such as [email protected].
45
48
46
49
1. You can also *invite* a user into the directory. In this case, an email is sent to a known email address, and an account is created and associated with that email address if the user accepts the invitation.
0 commit comments