Azure AD and User Management

Introduction: All my articles are compiled into simple steps with detailed screen shots and elaborative description. By following these steps even, a novice programmer should be able to replicate scenario. Please go through the steps and provide your valuable feedback to make my next articles more clearer and intent.

Note: I took help of various internet sources while researching this item. Credit goes to internet and Microsoft communities.  

This is my sixth article on Azure.

Please follow below links for my previous Azure articles

Azure WebApps

Azure Logic App

Azure Event Grids

Azure SQL

Azure AD MSAL

Follow below mentioned 10 steps to Understand Azure Active Directory and user management

 After completing this blog, you will be able to do

  • Set up Azure Active Directory
  • Create and manage users and roles

Sample Description: We are going to discuss different aspects of Azure AD , Users, Roles and its management

Step 1: Open Azure portal (https://portal.azure.com)

Step 2: Every azure account will have a default AD. Click on your profile at right upper corner and select “Switch Directory” option. Your default directory will be displayed and currently you logged in to it.

Step 3: Now we will create a new active directory. Either Click on Azure Active Directory Icon on home page or Click on Create Resource and select Azure Active Directory- Your default directory will be loaded

Step 4: Click on Create Tenant option and create your own Azure Active Directory

Step 5: New Active Directory has been created with name marsorgs. Now click on switch directory on your profile. 2 Active directories will be available.

Step 6: Select new AD and your login active directory will be changed. As this is a new AD, you will not have access to all your resources. You can access only AD here in this profile.

Step 7: From left side menu, select Azure Active Directory-marsorgs AD will be loaded. As you are the system administrator, role will be displayed as Global Administrator

Step 8: Now we will create couple of users in this AD and see the different roles. Click on Users > New User link to create a new user

We will create 2 users and assign the roles later. 1 user will be admin and other will be normal user

Step 9: We created 2 users, now we will assign the roles. Select User, Click on Assigned Roles. No roles will be displayed as we do not assign any roles. Click on Add Assignment and assign one role. Review the role names and its descriptions.

Step 10: Now login with both users and observe the profile and homepages. For both the users marsorgs will be the default directory, they do not have access to other resources except Active Directory. Both the users cannot delete the existing Active Directory, but they can create new active directory with in. Please check the roles against the users. Both the users can only create a new guest user

Happy Learning!!!