Explore identity in Microsoft Entra ID P.2

Units 6 -

What is Identity administration?

Identity administration is how identity objects are managed over the lifetime of the identity’s existence.

It can be manual or automated

What are common identity administration tasks?

Identity Proliferation

Provision and Deprovision

Identity Updates

Sychronization

Password management

Group management

Application Entitlement management

User interface

Change Control

What is identity proliferation?

Deals with the storage of identity objects within the environment.

What is Provisioning?

Provision speaks towards how identity objects are created within a system

What is Deprovision?

Deprovision focuses on the removal of an identity from having access (deletion, disablement of security principle or removal of access).

What are Identity Updates?

Identity Updates surrounds how identity information is updated throughout the environment.

Note: The goal is to move from manual to automated.

What is Synchronization?

Synchronization is ensuring that identity systems within an environment are up to date with the latest identity information.

What is Password Management?

Password management focuses on where and how passwords are set throughout the identity infrastructure.

What is Group Management?

Group management focuses on how organization manages groups within their environment

What is Application Entitlement Management?

AEM defines on how identities are graded access to applications.

What is User interface?

User interface is how the end user is able to request, or make, updates to their identity information.

What is Change Control?

Change Control is capability focuses on how changes flow through the environment whether manually completed by a service desk professional.

What is Microsoft Graph?

Microsoft Graph exposes REST APIs and client libraries to access data on the following Microsoft cloud services such as Microsoft Entra ID, Microsoft 365, devices and many others

What is the one endpoint Microsoft Graph offers?

https://graph.microsoft.com

Centralized Identity Management (Central Identity System)

Is a single identity tool where credentials are stored and managed, to provide authentication and authorization capabilities.