Mastering Microsoft 365 Identity and Access Administration
Microsoft 365 Identity Overview
Identity in Microsoft 365
Every time you log in to an application, check your email, or access a shared file, a system in the background is asking, "Who are you, and are you allowed to do that?" This process is called identity and access management, and it's the foundation of modern digital security.
In the world of Microsoft 365, this digital gatekeeper is called Microsoft Entra ID. Think of it as the central directory and security service for your entire organization.
Microsoft Entra ID (Azure AD) is a cloud-based identity and access management (IAM) service.
When you subscribe to Microsoft 365, you automatically get a dedicated instance of Entra ID. This service manages all the user accounts, ensuring that only the right people can access company resources. It's the single source of truth for who everyone is within your digital workspace.
Imagine your company's digital resources—apps like Outlook, Teams, and SharePoint—are rooms in an office building. Entra ID is the front desk that issues and checks the keycard for every employee. Before anyone can enter any room, they must first present their keycard to the front desk. Entra ID verifies the card and then tells the door whether to unlock or not.
Users, Authentication, and Authorization
The core of Entra ID revolves around three key concepts: user identities, authentication, and authorization. Understanding the difference is crucial.
A user identity is the digital representation of a person in Entra ID. It's not just a username and password. It’s a collection of attributes like the user's name, email address, job title, and department. Entra ID stores this information for every person in the organization, creating a comprehensive directory.
Once a user identity exists, they need a way to prove who they are. This is authentication.
The most basic form of authentication is a username and password. When you enter your credentials, you are authenticating—proving to the system that you are the person associated with that user identity.
Authentication answers the question: Are you who you say you are?
After you've successfully authenticated, the system needs to know what you're allowed to do. This is authorization.
Just because you've proven you're an employee doesn't mean you should have access to everything. Authorization is the process of checking your permissions. Can you access the marketing team's SharePoint site? Are you allowed to delete files from a shared folder? Entra ID manages these permissions, granting or denying access based on the policies set by administrators.
Authorization answers the question: What are you allowed to do?
| Concept | Question it Answers | Example |
|---|---|---|
| Authentication | Who are you? | Entering your username and password. |
| Authorization | What can you do? | The system checking if you have permission to open a specific document. |
Together, these elements form the basis of secure access in Microsoft 365. Entra ID creates the identity, authenticates the user, and then authorizes their access to resources, all happening seamlessly in the background every time you work.
What is the primary role of Microsoft Entra ID within the Microsoft 365 ecosystem?
When you successfully log in to an application, Entra ID then checks if you are allowed to view a specific sensitive file. This second step is an example of what?
This foundational understanding of identity, authentication, and authorization is the first step in managing a secure and efficient Microsoft 365 environment.