Azure Account, Subscriptions and Resource Groups

• Hierarchy is Azure Account can have multiple subscriptions

• Each Subscription can have multiple Resource Groups

• Each Resource Group can have multiple Resources

• Users need to login and create resources, so we need a platform for Identity

• Each Subscription is linked with only one Azure Active Directory(also referred as tenant)

• For more info refer here

What is Azure Active Directory

• Azure Active Directory (AAD) is Identity Platform.
• Its not Windows Active Directory Hosted on Azure Cloud.
• AAD Can give access to
  • Azure
  • Office 365
  • Applications (Mobile)
• In one simple Statement AAD is Identity as a Service
• AAD should be able to authenticate users and give then Authorizations. Users can be from
  • Windows Active Directory
  • Any other Directory Services
  • Any other OAUTH Based Identity Provider
  • Many other cases

AAD Major UseCases

• User Management (Authentication)
• Permission Management (Authorization/ RBAC )
• Active Directory Integrations
• Active Directory Federations
• Business To Business (B2B)
• Business To Consumer (B2C)