“The Microsoft Fabric implementation program gave our data engineering team a structured path from legacy pipelines to a modern lakehouse architecture.”
Enterprise Program Brief
Microsoft Entra Identity Administration Foundations
Administer identities and scoped access in an isolated training tenant. Proposed instructor-led duration; delivery subject to environment and lab validation.
VNode ITeSFoundation
Download Program Brief (PDF)Program Snapshot
Engagement scoped to cohort
Duration24 hours
FormatPrivate cohort
LevelFoundation
Course CodeF12
- MCT-led delivery
- Private cohort / virtual ILT
- Typical response: 1 business day
Scoping call typically scheduled within one business day
VNode ITeS delivers Microsoft Entra Identity Administration Foundations as an MCT-led VNode ITeS program for Cloud administrators, Security practitioners. Typical duration is 24 hours (Private cohort). Delivery stays scoped to how your teams will actually use the platform after the room empties. Private cohorts can shift emphasis by role mix, workspace or repo constraints, and rollout timing.
Audience Profile
Built for these roles
Cloud administrators, Security practitioners
- Tailored Team Delivery
Overview
Executive overview
Administer identities and scoped access in an isolated training tenant.
Environment and licensing
Isolated Entra tenant and test users/apps Roles for the required administrative operations Applicable Conditional Access/governance/agent entitlements Emergency access and recovery plan Delivery depends on environment and lab validation. This outline does not include step-by-step lab instructions.
Prerequisites
- Basic tenant administration and cloud concepts
Program Outcomes
Capabilities your teams will gain
- Administer isolated user, group and application identities
- Diagnose a sign-in or permission failure from evidence
- Test safely scoped policy and remove obsolete access
- Explain consent, recovery and identity lifecycle responsibilities
Enterprise Delivery
Private cohort delivery
VNode-designed, vendor-aligned instructor-led program. Scope role mix, delivery format, and rollout goals for your cohort.
Curriculum
Curriculum roadmap
Proposed instructor-led duration; delivery subject to environment and lab validation.
- Tenant and identity fundamentals
- Authentication and access policy
- Application identities and permissions
- Identity lifecycle and review
1Module 1 · 6 hours
Tenant and identity fundamentals
+
Module 1 · 6 hours
Tenant and identity fundamentals
Create test personas and map administrative responsibilities.
Users and groups
- Explain tenant and directory boundaries
- Distinguish workforce and application identities
Roles
- Create test users and groups
- Use group-based access where appropriate
Administrative scope
- Identify administrator role responsibilities
- Separate privileged and ordinary user accounts
Test-tenant boundaries
- Limit administrative scope
- Document isolated training identities and cleanup
Concept and design 3h · applied exercise 2.25h · review 0.75h. Included within module duration; no extra hours. Refine during delivery planning without silently changing published course hours.
Applied exercise: Tenant and identity fundamentals
Create test personas and map administrative responsibilities.
Expected output. Identity and role inventory
Acceptance. The identity inventory clearly separates administrative, user and application responsibilities.
2Module 2 · 6 hours
Authentication and access policy
+
Module 2 · 6 hours
Authentication and access policy
Evaluate an access policy with test identities and document recovery arrangements.
MFA concepts
- Explain MFA and authentication-strength concepts
- Distinguish authentication success from resource permission
Conditional Access
- Scope a Conditional Access policy to test users
- Use report-only evaluation before enforcement
Emergency access
- Review exclusions and emergency access
- Document policy recovery before testing
Report-only testing
- Inspect sign-in evidence for policy effects
- Explain unsupported or out-of-scope cases
Concept and design 3h · applied exercise 2.25h · review 0.75h. Included within module duration; no extra hours. Refine during delivery planning without silently changing published course hours.
Applied exercise: Authentication and access policy
Evaluate an access policy with test identities and document recovery arrangements.
Expected output. Access-policy test plan
Acceptance. The policy test shows expected decisions without risking tenant-wide lockout.
3Module 3 · 6 hours
Application identities and permissions
+
Module 3 · 6 hours
Application identities and permissions
Register a sample application and compare permission flows.
App registrations
- Distinguish app registrations from service principals
- Identify application owners and credentials
Service principals
- Compare delegated and application permissions
- Map consent to the actual calling scenario
Delegated versus application permissions
- Use least-privilege API permission requests
- Avoid granting unneeded broad permissions
Consent
- Inspect token audience and scope concepts
- Document credential storage and revocation
Concept and design 3h · applied exercise 2.25h · review 0.75h. Included within module duration; no extra hours. Refine during delivery planning without silently changing published course hours.
Applied exercise: Application identities and permissions
Register a sample application and compare permission flows.
Expected output. Application identity and consent record
Acceptance. The application permission record explains caller identity, consent and resource scope.
4Module 4 · 6 hours
Identity lifecycle and review
+
Module 4 · 6 hours
Identity lifecycle and review
Investigate a denied sign-in and remove obsolete access in the scenario.
Joiner mover leaver
- Map joiner, mover and leaver changes
- Remove unused assignments and credentials
Credential lifecycle
- Define credential expiry and rotation responsibilities
- Identify stale owners and orphaned applications
Sign-in logs
- Investigate an authentication or authorisation failure
- Use sign-in evidence without exposing tokens
Access reviews and entitlement checks
- Explain access review and governance entitlement boundaries
- Record remediation and follow-up checks
Concept and design 1.5h · applied exercise 3h · review 1.5h. Included within module duration; no extra hours. Refine during delivery planning without silently changing published course hours.
Capstone: Identity lifecycle and review
Investigate a denied sign-in and remove obsolete access in the scenario.
Expected output. Assessed identity administration record
Acceptance. The learner diagnoses a denied operation and removes the scenario's obsolete access.
Capstone
Investigate a denied sign-in and remove obsolete access in the scenario. Assessed identity administration record Evidence of relevant access, quality and risk controls Demonstration and limitations record
Assessment
Scenario-based practical assessment Administer isolated user, group and application identities 30% Diagnose a sign-in or permission failure from evidence 25% Test safely scoped policy and remove obsolete access 25% Explain consent, recovery and identity lifecycle responsibilities 20% Proposed VNode outline-level assessment; no vendor accreditation or completed lab validation implied.
Participant deliverables
- Assessed identity administration record
- Evidence of relevant access, quality and risk controls
- Demonstration and limitations record
Scope boundaries
Step-by-step lab instructions; Runnable solution code; Packaged source datasets; Executed environment validation
Delivery options
Count teaching hours, not calendar days. Exclude breaks. Split into 4-hour or 8-hour teaching sessions; schedule complex project work in contiguous blocks.
Delivery Models
Delivery models
Virtual ILTOnsiteHybridExecutive WorkshopBootcampWeekend
Engagement Fit
Engagement fit
- Private cohort delivery
- Foundation practitioner depth
- Business outcome alignment
Enterprise Customization
Enterprise customization
Tailor this program to your organization's priorities: Administer identities and scoped access in an isolated training tenant.
- Private cohort scheduling
- Equivalent-experience entry review
Resources
Program resources
Yes. Most enterprise clients prefer private delivery scoped to role mix, timezone, and rollout timeline. We align lab environments and scenarios to your tenant context where applicable.
Enterprise Proof
Trusted delivery outcomes
“We needed a partner who understood both the technical depth of Azure OpenAI and the governance requirements of an enterprise.”
Banking & Finance
Representative Enterprise Banking Team
The focus was not just on tooling knowledge, but on helping teams work from a shared operating model as they adopted a more modern data platform.
- Clearer platform operating model across teams
- Improved confidence in modern data stack adoption
Healthcare
Representative Healthcare Product Team
The engagement helped product and engineering stakeholders move from interest in AI to clearer implementation choices, security expectations, and prototyping discipline.
- Stronger alignment between product and engineering teams
- Improved clarity on prototype-to-production requirements
Delivery Capability
Enterprise-grade instruction
MCT-led delivery
Programs led by Microsoft Certified Trainer practitioners
Enterprise program oversight
Founder-led specialist delivery with structured rollout planning
Global delivery
APAC · EMEA · Americas · Virtual & Onsite
Implementation-focused
Hands-on labs aligned to production scenarios
