SC-300: Microsoft Identity and Access Administrator
The Microsoft Identity and Access Administrator course (SC-300 / SC-300T00) explores how to design, implement, and operate an organization’s identity and access management systems by using Microsoft Entra ID. Learn to manage tasks such as providing secure authentication and authorization access to enterprise applications. You will also learn to provide seamless experiences and self-service management capabilities for all users. Finally, learn to create adaptive access and governance of your identity and access management solutions ensuring you can troubleshoot, monitor, and report on your environment. The Identity and Access Administrator may be a single individual or a member of a larger team. This role collaborates with many other roles in the organization to drive strategic identity projects to modernize identity solutions, implement hybrid identity solutions, and implement identity governance.
-
Implement and Manage User Identities: Configuring and managing Microsoft Entra roles, administrative units, users, groups, custom security attributes, external collaboration settings, cross-tenant access, and hybrid identity solutions with Microsoft Entra Connect and Cloud Sync.
-
Implement Authentication and Access Management: Planning and implementing user authentication methods, multifactor authentication (MFA), password protection, self-service password reset (SSPR), Microsoft Entra Conditional Access policies, session controls, Identity Protection, and Global Secure Access.
-
Plan and Implement Workload Identities: Implementing managed identities for Azure workloads, service principals, enterprise application integration using Microsoft Entra Application Proxy, SaaS app integrations, app registrations, API permissions, and Defender for Cloud Apps.
-
Plan and Automate Identity Governance: Designing and implementing entitlement management with catalogs and access packages, access reviews, Privileged Identity Management (PIM) for Microsoft Entra roles and Azure resources, lifecycle workflows, and audit logging.
Before learning SC-300 (Microsoft Identity and Access Administrator), you should have the following skills and knowledge:
-
Security Fundamentals: Basic understanding of security best practices and industry security requirements, including defense in depth, least privilege access, shared responsibility, and Zero Trust principles.
-
Microsoft Cloud Concepts: Familiarity with Microsoft Azure concepts, Microsoft 365 services and cloud workloads.
-
Identity and Directory Services: Working knowledge of Active Directory Domain Services (AD DS) and core identity concepts including authentication, authorization, user management, and directory services.
-
Scripting and Querying Tools: Familiarity with PowerShell for administrative automation and Kusto Query Language (KQL) for querying logs and monitoring identity activities.
By learning SC-300 (Microsoft Identity and Access Administrator), you gain the following skills:
-
Implement and Manage User Identities: Ability to configure and manage Microsoft Entra tenants, users, groups, roles, administrative units, external identities (B2B collaboration, cross-tenant synchronization), and hybrid identities using Microsoft Entra Connect and Cloud Sync.
-
Implement Authentication and Access Management: Proficiency in deploying modern authentication methods, tenant-wide MFA, self-service password reset (SSPR), Conditional Access policies, risk remediation using Microsoft Entra ID Protection, and Global Secure Access.
-
Plan and Implement Workload Identities: Expertise in managing identities for applications and Azure workloads with managed identities and service principals, configuring enterprise applications, app registrations, API permissions, and monitoring app access via Microsoft Defender for Cloud Apps.
-
Plan and Automate Identity Governance: Capability to implement entitlement management (access packages, catalogs), configure access reviews, manage Privileged Identity Management (PIM) for privileged roles and Azure resources, and analyze sign-in and audit logs with workbooks and reports.