Chapter 1 of 4 · Microsoft SC-300
Implement and Manage User Identities
Tenant setup, roles and administrative units, users, groups and devices, external identities and hybrid identity.
- 4topics
- 24 minfast track
- 2diagrams and exhibits
- 20–25%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Entra Tenant, Roles and Administrative UnitsSC-300 tenant setup: custom domains, tenant properties, built in and custom Entra roles, administrative units, role assignable…6 min
- 2Users, Groups, Devices and LicencesSC-300 identities: users and groups, dynamic membership, custom security attributes, bulk operations, Graph PowerShell, device…6 min
- 3External Identities and Cross Tenant AccessSC-300 external identities: B2B guests, collaboration settings, cross tenant access and trust, cross tenant synchronization and…Diagram6 min
- 4Hybrid Identity with Connect Sync and Cloud SyncSC-300 hybrid identity: Connect Sync and Cloud Sync, password hash sync, pass through authentication, seamless SSO, Connect…Diagram6 min
About this chapter
What this chapter covers
This chapter covers the foundations of an identity solution in Microsoft Entra. You set up and secure a tenant, decide who can administer what, create and manage the identities that live in it, bring in people from other organisations, and connect the cloud directory to an on premises Active Directory.
It is worth 20 to 25 percent of the exam. The questions are scenarios, and they usually ask for the least privileged role, the right setting, or the right tool for a described job.
How the topics fit together
The pages follow the order in which you build a tenant.
- Entra tenant, roles and administrative units covers tenant settings, custom domains, built in and custom roles, scoping and effective permissions.
- Users, groups, devices and licences covers creating and managing identities, bulk operations, custom security attributes and device join.
- External identities and cross tenant access covers guests, collaboration settings, cross tenant access, cross tenant synchronisation and external identity providers.
- Hybrid identity with Connect Sync and Cloud Sync covers synchronisation, sign in methods, seamless single sign on and the move away from AD FS.
Many answers are a role name. Learn which role does the narrowest job, for example Helpdesk Administrator for resetting non administrator passwords and License Administrator for assigning licences.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft SC-300 question bank has 650 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.