Azure Entra ID User & Role Management — Step-by-Step Practical Guide With A Simple Excercise

Before going into the step by step practical guide on Creating User Via Azure Active Directory (Microsoft Entra ID) and Assigning Roles with RBAC,I will like to define key concepts to learn:

1. 
   Microsoft Entra ID: Azure's Identity Management System
   Microsoft Entra ID(previously called Azure Active Directory or Azure AD) is the service that manages all identities in Azure. Every user account, every application identity, every group, all of them are stored and managed here. When you log into the Azure Portal, Entra ID is checking your credentials behind the scene.

2. Identity And Access Management(IAM)

Identity and Access Management(IAM) Is the system that answers three very important questions about every person or application that tries to use cloud: WHO are you? Are you really who you say you are? And what are you ALLOWED to do here? Which talks about IDENTITY! AUTHENTICATION! AUTHORISATION!

3. Role Based Access Control(RBAC)

RBAC is how Azure controls what a logged-in user is allowed to DO. Instead of giving everyone full admin access. RBAC lets you assign specific roles to specific people. RBAC allows administrators to assign permissions based on roles instead of assigning permissions individually.

Examples:

Global Administrator

User Administrator

Security Administrator

4.Principle of Least Privilege (PoLP)

Users should only have the minimum access required to perform their duties.

Azure Entra ID User & Role Management Practice Exercise

Create a new user in Azure Entra ID.

Sign in with the newly created user account.

Grant the user Global Administrator access.

Using the newly promoted account, create another new user in Azure Entra ID.

After creating the second user, revoke the Global Administrator access from the first user account.

Document the entire process with screenshots and explanations

The Practice Exercise involved:

In this exercise, I carried out administrative tasks in Microsoft Azure using Microsoft Entra ID.

Creating users in Azure Entra ID

Assigning Global Administrator privileges

Testing administrative access

Revoking elevated permissions

Demonstrating Identity and Access Management (IAM) best practices

Introduction

This step by step guide will helped us gain practical experience in Azure identity administration and role-based access control (RBAC).

Prerequisites

Before starting, ensure you have:

An active Azure subscription

Access to Azure Portal

First thing login to your Microsoft Azure Portal by going to . Registration will require a phone number and a debit or credit card details to validate your account even for the free account. You have a choice between the free or pay as you go account.

Official Portal:

.

You are now in the Default Directory| Overview page.

3.Navigate to Users → + New user → Create new user.

Type Users on the search box and click on Users then click on + New User with a drop down arrow and click on create a new user

4.Fill in the details:

User principal name: Shalom1503

Display name: Shalom Ife

Password:***************

First name: Shalom

Last name: Ife

Usage location: Nigeria

And click on Next(Property)-> Next(Assignment)-> Review + create -> Create

Step 2 — Sign In with the Newly Created User Account

1. Open a new browser/incognito window


2. Go to: Microsoft Sign In Page


3. Sign in using:
   . Newly created username
   . Username:
   
   
   
   
   

   Step 3: Assign a Role to a User(Grant Global Administrator Access)

   
   
   
   
   
   1. Come to Default Directory through the Entra ID
   
   
   
   
   
   
   

   2.Type USER on the search box and Click on the USER → SHALOM IFE(New User Created)

   
   
   
   
   

   3.Select Assigned roles → + Add assignment.

   
   
   
   
   

   Step 4 — Use the Newly Promoted Account to Create Another User

   
   
   

   # Sign in with the promoted user account to create another new user in Azure Entra ID

   
   
   

   1.login to your Microsoft Azure Portal by going to
   
   (

   
   
   

   3 Fill in the details:
   
   User principal name: Favour1403
   
   Display name: Favour Timi
   
   Password:***************
   
   First Name:************
   
   Last Name:*************

   
   
   

   And click on Next(Properties)-> Next(Assignment)->
   
   
   Review + create -> Create

   
   
   
   
   
   
   

   Step 5 — Revoke Global Administrator Access from the First User

   
   
   

   1.Sign in using the original administrator account
   
   login to your Microsoft Azure Portal by going to
   
   
   

   
   
   

   2.Navigate to and click on Microsoft Entra ID
   
   

   
   
   

   4.On the search bar under the Administrator Roles, type the Global Administrator Roles given to the User and click on it

   
   
   
   
   

   6.Click the button in front of Global Administrator to make the X Remove Assignments button active and click on it and it will ask whether to Remove selected assignment. Click on YES
   
   

   
   
   

   Removing/Revoking privileged access follows the concept called the Principle of Least Privilege (PoLP), ensuring users only retain permissions necessary for their tasks or give people only the minimum access needed to do their job

   
   
   

   Conclusion

   
   
   

   This assignment provided hands-on experience with Azure identity and access management using Microsoft Entra ID. This allow us to learn how to create users, assign administrative privileges, manage RBAC roles, and apply security best practices in a cloud environment.

   
   
   

   The exercise also reinforced the importance of privilege management and secure administrative operations in enterprise cloud environments.

   Vollständiger Original-Artikel

   Den kompletten Beitrag mit allen Details direkt auf dev.to lesen.

   ↗ Original-Artikel auf dev.to lesen