So, now that we have looked at some of the features of Azure AD along with the common questions and answers about Azure AD, it’s time to go through the Azure AD dashboard. Figure 10.1 shows the Azure AD dashboard (you access this dashboard by choosing Azure AD from the left menu of the main dashboard). Let’s take a look at some of the different options on the left side, starting with Overview.
FIGURE 10.1 Viewing the Azure AD dashboard
The Overview section of the Azure AD Dashboard is the figure you are looking at in Figure 10.1. The first thing you will notice in the center of the screen is the default Azure AD directory and the number of users on Azure.
On the left- hand side, you can add Users, Groups, External Identities, Roles and Administrators, Administrative Units, Enterprise Applications, Devices, App Registrations, Identity Governance, Application Proxy, Licenses, Azure AD Connect, and other Azure AD options.
Users
The Users section (under Manage) on the left side allows you to view all of your current Azure AD user accounts (see Figure 10.2). In the Users section, you can create new users and new guest users, reset passwords, delete users, multifactor authentication, refresh your screen, or set up your columns.
Another task that can be created in the Users section is the ability to manipulate the user’s settings. The User Settings link allows you to set up how the user can launch and view applications, how the user can register applications, and if the user can access the Azure AD administrative portal. Administrators can also manage external users and access panel control from the Settings section.
FIGURE 10.2 The Users section
The Users section also allows you to see how often the user is logging into Azure (this allows you to perform an access review), and you can also get audit information about the user account. Finally, in the Users section, you can also troubleshoot user issues and open a support ticket with Microsoft for additional help.
Groups
The Groups section allows you to create and manage groups (see Figure 10.3). In the Groups section, you can create new groups, manage group settings for all groups, manage group membership, and delete groups. You can also do auditing on groups along with troubleshooting group issues or opening a support ticket with Microsoft for additional help.
External Identities
The External Identities section allows you to work with user accounts from other organizations. The Organizational Relationship section also allows you to invite users who already own an Azure Active Directory account or a Microsoft account. If they have one of these account types already set up, they can automatically sign in without any further configuration from an administrator.
In the Settings section of External Identities (see Figure 10.4), you can specify what guest accounts can do in Azure. For example, you can decide if guest user access is limited or if users can invite other users to use your organization’s Azure network. Finally, you can set up collaboration restrictions (which domains you can invite users from) for your guest user accounts.
FIGURE 10.4 Settings section of External Identities
The Lifecycle Management section of External Identities lets you establish terms of use agreements while also allowing you to set up auditing of your guest users. Finally, you can troubleshoot issues or open a support ticket with Microsoft for additional help.