Part 13 - Managing User & Device Identities in Microsoft Azure Active Directory

In this blog, we will explore the identity management section of Azure AD.

Licensing

https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing#available-versions-of-azure-ad-multi-factor-authentication

The minimum required for password resets	Minimum required for password resets
Azure AD Premium P2	Azure P1 + Security Features

Subscriptions

There is a trust relationship between Azure AD and the subscription.
Each subscription can only trust a single Azure AD directory.
Multiple subscriptions can trust the same Azure AD directory.

Create Dynamic AD Groups

Let’s begin by creating a group in Azure for our Norfolk Office based on a condition or property eg: City.

We will choose Dynamic Group as we will want to group users later based on the office location they work

Every group should have a group owner so we’ve added one here.

Assigning Licenses to Groups

Rather than assigning licenses at an individual user level, it’s much faster to do the assignment at the group level and this happens under the licenses tab at the Group level

Creating Administrative Units

AU in short will give a few users some privileged access in our Norfolk office so they can reset passwords, assign licenses etc.

Click on the Helpdesk Administrator or User Administrator

Add Sarla as our Helpdesk admin for Norfolk Site

Click Review and Create

Our Administrative Unit Norfolk HelpDesk Admins is now ready.

Creating Users

Since we choose to add users dynamically via their office location, our users will be automatically added to the group when the office location is set to Norfolk. Users get the name plus the default domain name as their email account.