5 min Azure Active Directory and IAM

Active Directory

Add a user:

Azure Active Directory->Users->New User:

Create user in organization (youmail.onmicrosoft.com) or invite user

We will create a user jimmy with no permission yet.

Assign roles to jimmy by built in groups and access.

Directory roles, it is a long list

Or make a group and add jimmy to the group

IAM (Access control to that particular resource)

Here we have a vnet

Let’s check IAM and assign jimmy to it.

We add reader

We add jimmy to the role

And we review + assign