- Explore how Microsoft Entra ID defines who can deploy, invoke, and manage AI workloads in Azure through identity types, authentication flows, and role scope decisions.
In this module, you learn to:
- Explain identity as the control layer for AI workloads in Azure
- Distinguish between management plane and data plane access in AI environments
- Describe authentication flows used by AI endpoints integrated with Microsoft Entra ID
- Differentiate between human, application, and managed identities
- Evaluate how role assignments and scope hierarchy affect blast radius
- Identify common identity design patterns that introduce AI security risk
- Explore how to use built-in Azure roles, managed identities, and RBAC-policy to control access to Azure resources. Identity is the key to secure solutions.
By the end of this module, you'll be able to:
Configure and use Azure roles within Microsoft Entra ID
Configure and managed identity and assign it to Azure resources
Analyze the role permissions granted to or inherited by a user
Configure access to data in Azure Key Vault using RBAC-policy
- Conditional Access gives a fine granularity of control over which users and identities can do specific activities, access which resources, and how to ensure data and systems are safe—including AI agent identities managed through Microsoft Entra Agent ID.
By the end of this module, you can:
Plan and implement security defaults.
Plan conditional access policies.
Implement conditional access policy controls and assignments (targeting, applications, and conditions).
Test and troubleshoot conditional access policies.
Implement application controls.
Implement session management.
Configure smart lockout thresholds.
Identify how agent identities are protected using Conditional Access.
- Protecting a user's identity by monitoring their usage and sign-in patterns will ensure a secure cloud solution. Explore how to design and implement Microsoft Entra Identity protection.
By the end of this module you're able to:
Implement and manage a user risk policy.
Implement and manage sign-in risk policies.
Implement and manage MFA registration policy.
Monitor, investigate, and remediate elevated risky users.
