azureblog.co.uk
← cd ~/learn
// learning path · beginner

Entra ID foundations for new admins

The everyday Entra jobs done properly: onboarding, Conditional Access testing, licensing, app consent, guests and recovery.

0 of 7 read · about 16 minutes in total
start with part 1 →
  1. 01Temporary Access Pass: onboarding users without a passwordA Temporary Access Pass lets a new starter, or someone who's lost their phone, sign in once and set up a passkey or Authenticator. No temporary passwords sent by email.3 min✓ read
  2. 02Test Conditional Access safely with report-only mode and What IfMost Conditional Access outages come from a policy that did something nobody expected. Two built-in tools let you see exactly what a policy would do before it does it.2 min✓ read
  3. 03Group-based licensing: finding and fixing assignment errorsGroup-based licensing is the right way to assign Microsoft 365 licences, until a user silently doesn't get one. Here's where the errors hide.2 min✓ read
  4. 04Lock down app consent without blocking your usersIllicit consent grants are a favourite way to steal mailbox data. Restricting user consent and turning on the admin consent workflow closes the door without making life miserable.2 min✓ read
  5. 05Clean up guest accounts with access reviewsGuest accounts pile up quietly. Access reviews ask the right people whether each guest still needs access, and can remove them automatically if nobody says yes.2 min✓ read
  6. 06Entra Backup and Recovery is here: an undo button for your tenantEntra ID now keeps daily backups of your critical directory objects and lets you compare and roll back changes. It's on by default, but you need to know how it works before you need it.3 min✓ read
  7. 07Six KQL queries for Entra sign-in logs every admin should keepOnce sign-in logs flow into Log Analytics, a few queries answer most of the questions you'll get. Copy these into a workbook or saved searches.2 min✓ read

Progress is saved in this browser only. A post counts as read once you've scrolled most of the way through it.

Check what you've learned

5 questions. Get 4 or more right to earn the Entra ID foundations for new admins badge. You can take it before reading, too.

  1. A user in a licensing group didn't get a licence. Where do you look first?
  2. Which is a common cause of group-based licensing errors?
  3. What should happen to guests who don't respond to an access review?
  4. What does What If in Conditional Access do?
  5. Deleted users can be restored for how long from the recycle bin?