AZURE ACTIVE DIRECTORY(microsoft entra) ROLE ASSIGNMENT
Published: 2024-05-07 22:36:55

**QUESTION 1:Explain the difference between Azure AD Roles and Azure Roles**
Azure AD Roles  are used to manage access to Azure Active Directory resources and can include roles like Global Administrator, User Administrator, etc.
**Azure Roles,** are used to manage access to Azure resources (such as virtual machines, databases, etc.) and are assigned within Azure itself, rather than Azure Active Directory

**QUESTION 2: Create the Admin Department and add two users to it**
- Log in to the Azure portal (portal.azure.com).select azure active directory(miscrosoft Entra)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/2ozusfdsst2o4t9yzkb9.png)
-Select **group**

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/a5il64adr8cqzgaujhed.png)
-Select **New Group**

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/cvrn9atr0xt00hcca38o.png)
- Select Security for the group type and Enter group name as Administrative Department. Finally select create.
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/9wi6aews19byk5ystyci.png)

** Steps to Add 2 new Members to the Group**
1. Navigate to azure home page/portal. Select miscrosoft entra
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/p2f8jo0b96af9bq27yo2.png)
2.Select users
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/msuwp3xgkz7lc52l44iv.png)
3.Select create new Users
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/itt2do7izjedhcxho6ts.png)
4.In the user principal name (Upn) and display name put your desired name as **user A (Sollomex)**
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/wr2rqera1rhpgosf6zgg.png)
5.Fill job  and contact information correctly.Click next assignment

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/iunn7fdluhljdfcw3pwz.png)
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/d3nbrsjzikmzsmdiojdv.png)
6.Add member to group
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/kms4x791l74mevvxt788.png)
7.Select Administrative Group
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/i6sonk2vagctsph9zg6k.png)
8.Select add role.
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/55pwsb8gn64y3kgujkyx.png)
9.Choose  Global Administrator
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/7bveuszc200ji6xn8wbk.png)
10.Select review and create
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/1bgrx1yd6hvn0wblk5b6.png)
11. Select create
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/5hrbz5grewvc647joiil.png)

QUESTION 3: Assign the Global Administrator Role to User A
 ROLE HAS ALREADY BEEN ASSIGNED TO USER A (sOLLOMEX)IN THE ABOVE.
Method B
Navigate to Azure Active Directory > Roles and administrators > Add assignment.
- Select "Global Administrator" role and choose User A (sollomex) as the member.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/lnffcx658brgvaxken8c.png)
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/7y2k2s1rz3agadf3fyic.png)
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/sxaxpnr03pga3vpbg85b.png)

**QUESTION 4: Show all the steps it took the Global Admin to Log in into the Azure Portal with his new credentials**
- User A (sollomex) should receive an email notification about the role assignment.
- User A (sollomex) logs in to the Azure portal using their credentials.
- Upon successful login, User A (sollomex) will have access to the Azure portal with Global Administrator privileges.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/liskqtm1jdvvxhpjeziw.png)

** QUESTION 5: Let the Global Administrator create/onboard a new member to the Admin Department**
- User A (sollomex) navigates to overview page of the miscroft entra. Select group
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/m2jxpq65p1oeeuxm7drp.png) 
sElect Administrative Department
![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/oufvfgu8kesf3hwo231i.png)
- User A(sollomex) selects "Add member" and adds the new member to the Administrative Department group.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/o2gi28xbvgkiva7o1ufn.png)