In this article, I share simple and clear definitions of Azure accounts, subscriptions, and resources to help establish a foundational understanding of Azure’s basic building blocks.
The information in this article is essential and beneficial whether you’re preparing for the AZ-900 Azure Fundamentals or AZ-104 Azure Administrator exams. Additionally, it’s equally valuable for non-technical individuals who participate in discussions or meetings about Azure. This foundational knowledge will not only help in understanding key Azure concepts but also in contributing effectively to Azure-related conversations and decision-making processes.
Grasping these fundamental Azure concepts from the outset is crucial for anyone entering the Azure environment. That’s why I take the time to thoroughly explain each element rather than assuming prior knowledge or overlooking their significance. Understanding these basics is key to navigating and effectively utilizing Azure services and sets a solid foundation for more advanced learning.
I share weekly insights on quantifying cyber risk in dollars, not colors — including Monte Carlo simulation, loss exceedance modeling, Cyber Value at Risk (VaR), and NIST CSF quantification. If you’re an executive, CISO, or security leader looking for practical, data-driven approaches to cyber risk, let’s connect on LinkedIn.
Azure Account
- Definition: An Azure account is essentially an identity used to interact with Azure services. It can represent a person or an application.
- Usage: For people, it’s their personal ID; for applications, it’s a way to authenticate and operate within Azure without using personal credentials.
- Security: Emphasizes the importance of not using personal IDs for applications due to security best practices.
Tenant
- Definition: A tenant in Azure represents an organization or company. It’s linked to a domain name, which becomes part of the Azure identity.
- Domain Association: Companies use their domain names (like company.com) for Azure. Without a personal domain, Azure provides a default domain (tenantname.onmicrosoft.com).
- Azure Active Directory: Tenants are associated with Azure Active Directory (now Azure Entra ID), providing a dedicated instance for the organization. Each account is part of at least one tenant.
Azure Subscription
- Definition: A subscription is a billing agreement with Microsoft, allowing access to Azure services.
- Types and Billing: Various types exist, like free, pay-as-you-go, and enterprise agreements. Subscriptions determine how usage is billed.
- Multiplicity: An organization can have multiple subscriptions, which helps separate different environments like production and development. It can also have an added security benefit by helping control the blast radius of an attack.
Resource Group
- Definition: A resource group is a container that holds related Azure resources (like VMs, web apps, databases) for easy management, permission setting, and billing.
- Organization: Acts like a folder, helping organize resources under a subscription.
- Management Benefits: Simplifies permissions management and can be used to delete all resources within it for easy cleanup. I use this approach when demonstrating concepts to students in a free or pay-as-you-go account to help eliminate or minimize any fees.
If you are studying for the AZ-900 Azure Fundamentals or AZ-104 Azure Administrator, this information would be helpful to you.
Mastering Fundamentals
Mastering the fundamentals isn’t just about getting the basics right; it’s the foundation upon which excellence is built.
It’s the difference between merely doing and truly understanding, enabling you to innovate, adapt, and excel in an ever-changing world.
We’re merely skimming the surface without a solid grasp of the fundamentals. Dive deep, master the core, and the heights of achievement become limitless.
-Tim Layton
I share weekly insights on quantifying cyber risk in dollars, not colors — including Monte Carlo simulation, loss exceedance modeling, Cyber Value at Risk (VaR), and NIST CSF quantification. If you’re an executive, CISO, or security leader looking for practical, data-driven approaches to cyber risk, let’s connect on LinkedIn.
