Unit 4: Exercise – Manage User Roles

Objective

This exercise demonstrates how to create users and assign them administrative roles in Microsoft Entra ID, including enabling premium features using trial licenses.

Step 1: Create an Azure Account and Add Microsoft Entra ID Premium P2 Trial

To perform role-based features such as Privileged Identity Management (PIM), a Microsoft Entra ID Premium P2 license is required.

Process:

• Go to the Azure portal and select Start free to create a trial subscription.
• Follow the sign-up wizard using a Microsoft account.
• Once signed in, open Microsoft Entra ID in the portal.
• Go to Licenses → Overview → Quick tasks → Get a free trial.
• Choose Microsoft Entra ID Premium P2 → Free trial → Activate.
• Wait a few minutes and refresh until “Premium P2” appears under your organization.
• If not visible, sign out and back in.

Example: Contoso’s new IT trainee needs to practice PIM-based role assignments, so the Global Administrator enables a 30-day Entra ID P2 trial.

Step 2: Add a New User

To create a user manually:

• In Microsoft Entra admin center, sign in as a Global Administrator.
• Navigate to Identity → Users → All Users → + New User.
• Fill in the following fields:

• Click Create.

A new user “Adele Vance” is now registered under your organization.

Step 3: Assign a Role to the User

• From the All Users list, open Adele Vance’s profile.
• Select Assigned roles → + Add assignment.
• Choose the Application Administrator role → Add.

Result: Adele now has permissions to manage all enterprise applications — including configurations like SSO, user assignments, and app proxy settings.

Step 4: Remove a Role Assignment

• Navigate to Users → All Users → Adele Vance.
• Open Assigned roles.
• Select Application Administrator → Remove.
• Confirm with Yes.

This removes Adele’s administrative permissions, returning her to a standard user role.

Exam Insight

Expect questions about:

• Which role allows management of apps (Application Administrator).
• Which steps are required to assign or revoke a role.
• Importance of least privilege when delegating administrative access.