How Assign Azure AD Premium Licenses to users.

In our earlier article here we did see how to activate AAD  Free Premium P2 licenses. Let us know see how to assign Licenses to the users which is very straight forward.

How to Activate Azure Active Directory Premium P2 Trail Licenses.

Azure Active Directory (AAD) comes with free license, which means only basic feature of AAD are available. Based on the licenses you have the features available will differ. Organizations that require features like PIM (Previlaged Identity Management), SSPR (Self Service Password Rest), MFA (Multifactor Authentication) with OTP on Authenticator App, SMS, Dynamic Groups, etc will go with Premium licenses (P1 or P2).

Azure Active Directory

Before we get into understanding of Azure Active Directory (AAD), let us understand what is an Identity.

What is an identity?
An identity is an Object mostly userid with a password that is used for authentication / authorization.

What is Azure Active Directory?

Azure Active Directory (Azure AD) is a cloud-based identity and access management service. This service helps your employees access external resources, such as Microsoft 365, the Azure portal, and thousands of other SaaS applications.

Why do we need identities on Azure i.e., AAD?
Azure AD or Identies on azure are needed for
1)login to portal==>>portal.azure.com 
2)Get access to azure resources (RBAC) 
3)Get access to SaaS (Software as a Service) Applications.

Virtual Network Peering

Vnet peering enable communication between vnets, with in the same region, different regions, different subscriptions and ofcourse different Tenants. 

Vnets will helps with isolation which means resources accross vents will not communicate with each other, hence the need of Peering. 

Peering between the Vnets in the same Region is called Regional Vnet Peering. 

Peering between the Vnets in the different Regions is called Global Vnet Peering.

Vnet Peering traffic will go through private network of azure, which give you below advantages.
    *Secure
    *Reliability
    *Better performance

Peering should always two ways, If you create onway peering, two way communication will not work.

If you want allow traffic one way the other way to be bloked do it by Network Security Groups (NSG).

Here is the video which help you with the configuration of both Regional and Global Vnet Peering.

Creation of Azure Active Directory Guest Account

In this lab, you will learn how to create an Azure Active Directory Guest user ids.

Requirements: 

Global Administrator role or any of the limited administrator directory roles such as guest inviter or user administrator that allows guest user creation.

Log in to Azure portal and search for Azure Active Directory.

Navigate to the Users section under Manage in Azure Active Directory.

Azure Active Directory User(s) Creation using Powershell

Goal: 

In this lab, you will learn how to create an Azure Active Directory user id(s) using Azure Powershell.

Requirements: 

User should be part of Global Administration or User Administration Role.

Create AAD User(s) using Powershell:

Creation of user accounts using PowerShell on your local machine requires the following. However, you can also use Azure Powershell in Cloudshell step 1 is not required.
1) Azure Active Directory PowerShell Modules, here is the command that is required to install AAD PowerShell modules on your machine.
$AzureAdCred = Get-Credential
Connect-AzureAD -Credential $AzureAdCred
Install-Module AzureAD
2)Authentication to Azure Active Directory. Once installation of AAD PS modules is done run the following command for authentication.

Azure Active Directory User(s) Creation using portal

Goal: 

In this lab, you will learn how to create an Azure Active Directory user id(s) using Portal.

Requirements: 

User should be part of Global Administration or User Administration Role.

Create AAD User(s) using Azure Portal:

1) Log in to Azure portal

2) Search for a service Azure Active Directory