Study guide — AZ-104

Manage Microsoft Entra users and groups

• Create users and groups, including bulk import and Microsoft 365/security groups
• Manage user and group properties, including licenses and dynamic membership rules
• Manage guest accounts and external collaboration settings
• Configure self-service password reset

Manage access to Azure resources

• Create custom roles and assign built-in roles (RBAC)
• Interpret access assignments, including scope (management group/subscription/resource group/resource)
• Configure Azure resource permissions using RBAC versus Microsoft Entra roles

Manage Azure subscriptions and governance

• Implement and manage Azure Policy, including initiatives and compliance
• Configure resource locks, tags, and management groups
• Configure and manage Azure Cost Management, budgets, and alerts
• Manage subscriptions and move resources across subscriptions/resource groups