This repository demonstrates hands-on identity and access administration using Microsoft Entra ID (Azure AD).
Scope includes user and group management, group-based licensing, and ticket-style troubleshooting scenarios.
- User lifecycle management (create, update, disable, restore)
- Security group design and membership testing
- Group-based licensing assignment and validation
- Access verification and common troubleshooting workflows
- Documentation in an IT ticket format (INC-style)
- Microsoft Entra ID (Microsoft 365 Developer tenant or test tenant)
- Admin portal: Entra Admin Center
- Test accounts: standard users + admin account
- Optional: Microsoft 365 apps / test SaaS app for access checks
- Lab setup:
docs/00-lab-setup.md - User management:
docs/01-user-management.md - Group management:
docs/02-group-management.md - Group-based licensing:
docs/03-group-based-licensing.md - Access tests:
docs/04-access-tests.md - Troubleshooting tickets:
docs/05-troubleshooting-tickets.md
- INC-001: User can’t access app (missing group membership) —
tickets/INC-001-user-cant-access-app.md - INC-002: License not applying to user —
tickets/INC-002-license-not-applying.md - INC-003: Group membership change delay / sync expectation —
tickets/INC-003-group-membership-delay.md - INC-004: User disabled / sign-in failure —
tickets/INC-004-user-disabled-login-failure.md
- All user names are test accounts.
- Screenshots are stored under
/evidence/screenshots/.
entra-id-user-group-management/
├─ README.md
├─ docs/
│ ├─ 00-lab-setup.md
│ ├─ 01-user-management.md
│ ├─ 02-group-management.md
│ ├─ 03-group-based-licensing.md
│ ├─ 04-access-tests.md
│ ├─ 05-troubleshooting-tickets.md
│ └─ glossary.md
├─ tickets/
│ ├─ INC-001-user-cant-access-app.md
│ ├─ INC-002-license-not-applying.md
│ ├─ INC-003-group-membership-delay.md
│ └─ INC-004-user-disabled-login-failure.md
├─ evidence/
│ ├─ screenshots/
│ │ ├─ users/
│ │ ├─ groups/
│ │ ├─ licensing/
│ │ └─ sign-in-logs/
└─ templates/
├─ ticket-template.md
└─ change-log-template.md