Azure identity and governance concepts explained

Understand Microsoft Entra ID, RBAC, policies, subscriptions, and management groups together.

Identity and governance questions often test how Azure resources are organised and controlled. Think in layers: tenant, management groups, subscriptions, resource groups, and resources.

Role-based access control handles who can perform an action, while Azure Policy controls whether a resource configuration is allowed.

When studying, compare these tools side by side and practise choosing the narrowest scope that satisfies the requirement.