Microsoft · SC-300
Identities for apps and Azure workloads
SC-300 · Lesson 10 of 16 · 1:16:09
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-300 exam (Microsoft Identity and Access Administrator). In this lesson: application objects and service principals, managed identities and how they remove secrets, system-assigned and user-assigned identities, granting access with Azure roles (for example on a key vault), and on-premises service accounts (group managed and standalone managed service accounts). Includes three original practice questions.
Preview the topics
- Ten web apps must use the same identity to read one storage account, and that identity must survive when an app is deleted. What should you create?
- A virtual machine has a system-assigned managed identity, but its code gets access denied on a key vault. What’s missing?
- A Windows service runs on four load-balanced servers on premises, and nobody should ever manage its account password by hand. What should you use?