Continue your lesson
Trace the identity, credential, token, assignment, policy decision, resource, and audit record for each access request.
Block 1 of 3Compare Cloud-only user · Assigned membership group
Current · 12 min
Compare Cloud-only user · Assigned membership group
Optional concept notes
Cloud-only user
Creates an identity whose source of authority is Microsoft Entra rather than on-premises directory sync.
Assigned membership group
Adds and removes group members through explicit administrator or owner actions.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 2 of 3Compare Dynamic membership group · Group-based licensing · Bulk user operation
18 min
Compare Dynamic membership group · Group-based licensing · Bulk user operation
Optional concept notes
Dynamic membership group
Evaluates user or device attributes to maintain group membership automatically.
Group-based licensing
Assigns and removes product licenses according to group membership.
Bulk user operation
Creates updates or deletes multiple identities by using a supported CSV workflow.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 3 of 3Compare Custom security attribute · Device join and registration management · Identity license assignment
18 min
Compare Custom security attribute · Device join and registration management · Identity license assignment
Optional concept notes
Custom security attribute
Adds governed business-specific key-value data to supported Microsoft Entra objects.
Device join and registration management
Controls and maintains device identities that users join or register with Microsoft Entra.
Identity license assignment
Assigns modifies and reports product licenses for users or groups.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a fictional tenant. Draw one access path, apply least privilege, test an exception, and name the logs that would confirm the result.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 1.2 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.