Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Mastering Azure Administration: 200+ Real-World AZ-104 Labs
Role Play
Rating: 4.8 out of 5(2 ratings)
57 students

Mastering Azure Administration: 200+ Real-World AZ-104 Labs

AZ-104 Zero-Theory Lab Intensive: 150+ Direct-Action Labs using Portal, PowerShell, and CLI.
Created byAnand Rao Nednur
Last updated 3/2026
English

What you'll learn

  • Create and manage users and groups in Entra ID via Azure Portal
  • Automate identity management using Windows PowerShell and Azure CLI
  • Configure custom RBAC roles and assignments across all interfaces
  • Implement Conditional Access, MFA, and PIM for advanced security
  • Apply Azure Policies, resource locks, and tags for governance
  • Deploy and replicate storage accounts using Portal, PowerShell, and CLI
  • Configure Azure Files, blob lifecycle management, and private endpoints
  • Provision and resize Windows/Linux VMs and manage extensions
  • Deploy VM Scale Sets and configure availability zones
  • Build virtual networks, subnets, and peering via Portal and CLI
  • Deploy Load Balancers and Application Gateways with WAF
  • Establish hub-and-spoke architectures and Azure Firewall rules
  • Deploy Load Balancers and Application Gateways with WAF
  • Monitor resources using KQL, Azure Monitor, and diagnostic logging
  • Automate deployments using ARM templates and Bicep files
  • Backup and restore virtual machines and Azure file shares
  • Sync hybrid identities using Azure AD Connect and SSO

Course content

8 sections • 222 lectures • 47h 15m total length

  • Creating New User using Azure CLI15:07
  • Creating a Group using CLI-1.11:35
  • Creating a Group using CLI-213:44
  • RBAC Azure CLI10:26
  • Assigning a custom role to User10:36
  • Azure Resource Lock7:16
  • Azure Resource Lock Cont....5:29
  • Adding a new set of Tags6:47
  • Updating Existing Azure Tags4:56

    Update existing Azure tags using the Azure CLI on a storage account by merging new tags such as department and team with existing environment and owner.

  • Removing Tags6:52
  • Removing all tags at once3:59
  • Assigning Custom Policy11:37
  • Assigning Built-in Policy12:15
  • Azure CLI Labs - Quiz
  • Azure CLI Labs -Roleplay
  • Creating New User using Azure Portal4:42
  • Creating a Group using Azure Portal10:47
  • Creating and adding Bulk user in Entra ID using Azure Portal9:42
  • Role Based Access Control-16:35

    Master Azure RBAC concepts: security principal, role definition, scope, and role assignments, plus built-in and custom roles for least privilege, separation of duties, and audit ability.

  • Role Based Access Control-26:11
  • Role Based Access Control-311:59
  • Role Based Access Control-4-Create and assign custom RBAC roles9:17
  • Azure Resource Lock9:29
  • Organize & Manage Resources using Tags4:57
  • Introduction to Azure Policy3:08
  • Assigning Azure Build in Policy8:47
  • Creating Azure Custom Policy8:06
  • Assigning Azure Custom Policy6:18
  • Portal-Based Labs-quiz
  • Portal-Based Labs-Roleplay
  • Introduction to Azure Initiative2:38

    Learn how Azure initiative bundles multiple policies into a single unit to simplify management, group related policies, and support larger tasks and compliance tracking.

  • Creating Azure Initiative using Build in Policies9:52
  • Assigning Azure Initiative4:37
  • Create & Assign Azure Initiative using Custom Policy12:26
  • Introduction to Microsoft Entra Connect13:39
  • Install Microsoft Entra Connect to Configure Entra connect server35:44
  • Implementing Hybrid Entra ID device joined47:03
  • Understanding Conditional Access in Microsoft Entra ID2:51
  • Implementing Conditional Access to Enforce MFA12:25

    Implement conditional access policies to enforce multi-factor authentication for users, using templates or from scratch, configure assignments and cloud apps, and test impact with what-if before deployment.

  • Identity Protection in Microsoft Entra ID8:09
  • Privileged Identity Management (PIM) in Microsoft Entra ID3:16
  • Assigning And Activating Privileged Roles using Privileged Identity Manage16:38
  • Portal-Based Labs-quiz
  • Portal-Based Labs-Roleplay
  • Creating New User using Powershell15:56
  • Creating a group using windows Powershell-113:58
  • Creating a group using windows Powershell-211:04
  • RBAC Powershell-19:01

    Explore role-based access control in PowerShell by installing the Azure module, connecting to Azure, and assigning the built-in reader role to Barbara Smith at the subscription scope.

  • RBAC Powershell-212:26
  • Assigning a Custom Role to User16:46

    Create a custom Azure role with a JSON definition, upload it, and assign the custom VM operator role to a user at the subscription level.

  • Azure Resource Lock9:15
  • Applying Resource Lock in Resource Group5:18
  • Applying Azure Resource Lock to Subscription Scope6:27

    Apply Azure resource log at the subscription scope using PowerShell, creating a delete log and validating its presence in the portal, with commands to add and remove the log.

  • Applying Azure Tags on Storage Account4:21
  • Update Tags to Add more Tags6:51
  • Adding a new set of Tags6:47
  • Removing Tags6:53
  • Azure Built-in Policy PowerShell6:42
  • Azure Custom Policy PowerShell7:11
  • PowerShell Labs - Quiz
  • PowerShell Labs-Roleplay

Requirements

  • Basic understanding of cloud computing concepts (SaaS, PaaS, IaaS)
  • Familiarity with operating systems (Windows and/or Linux)
  • Basic knowledge of networking concepts like IP addressing and DNS
  • Recommended to complete Az -900 Certifiation or a course.
  • An active Azure subscription (Free Trial or Pay-As-You-Go) for labs
  • Local installation of Windows PowerShell and Azure CLI for scripting modules
  • General awareness of Active Directory or identity concepts

Description

Forget the slide decks and the "theory drama" that slows you down. This course is a high-octane, lab-centric intensive designed for engineers who want to master the Azure ecosystem through raw, hands-on execution. We have stripped away the fluff to focus exclusively on the technical muscle memory required to operate as a Tier-3 Azure Administrator. Every single module is a deep dive into production-grade scenarios where you don't just learn what a service is—you learn exactly how to build, break, and fix it using the Azure Portal, Windows PowerShell, and the Azure CLI.

This curriculum follows a "Triple-Threat" deployment methodology. For every architectural challenge, you will first execute the deployment in the GUI to understand the workflow, then immediately pivot to automate the same task using PowerShell, and finally scale the operation using Azure CLI commands. This approach ensures you are prepared for any environment, whether you are managing a single resource group or a global enterprise subscription.

High-Impact Lab Highlights

  • Identity Mastery: Execute bulk user migrations and construct complex custom RBAC roles using New-AzRoleDefinition and az role assignment create.

  • Governance Control: Hardcode resource security by implementing Azure Policies and resource locks directly from the command line.

  • Enterprise Storage: Move beyond basic uploads by configuring LRS/GRS replication and mounting Azure Files on live Windows and Linux nodes.

  • Compute Scaling: Provision high-availability VM Scale Sets and automate backup protections using Enable-AzRecoveryServicesBackupProtection.

  • Network Architecture: Construct sophisticated hub-and-spoke VNet topologies and secure them with Azure Firewall and tailored NSG rules.

  • Traffic Engineering: Deploy internal and external Load Balancers and Application Gateways with WAF to manage enterprise-grade traffic patterns.

  • Operational Resilience: Write KQL queries to hunt through logs and automate metric alerts using New-AzMetricAlertRuleV2.

  • Hybrid Connectivity: Master the bridge between on-premises and cloud by installing Azure AD Connect and managing sync cycles via PowerShell.

The networking section of this course is a direct assault on complexity. You won't just read about connectivity; you will actively build virtual network peering, set up user-defined routes (UDRs), and implement Private Links to ensure data never leaves the Microsoft backbone. By the time you reach the Load Balancing modules, you will be proficient in configuring health probes and NAT rules that keep global applications online and performing at peak efficiency.

In the storage labs, we get dirty with data persistence. You will learn to host static websites in Blob Storage and then immediately secure them by enabling private endpoints and restricting public access. We go deep into lifecycle management and soft delete settings to ensure you can manage data costs and recovery scenarios like a pro, utilizing both the Portal and az storage account management-policy create.

Identity and Governance are the foundation of any secure cloud. You will implement Conditional Access policies for MFA and device compliance, while also enabling Privileged Identity Management (PIM) to eliminate standing access risks. These aren't just checkboxes; these are labs where you will simulate access requests and enforce security boundaries across Management Groups and Subscriptions.

To ensure your infrastructure is reproducible, we dive into automation using ARM templates and Bicep files. You will learn to organize resources using strict naming standards and tags, then use Azure Resource Graph to query your entire inventory in seconds. We even cover the financial side of administration by scripting budgets and anomaly alerts to stop cost overruns before they happen.

The final stage of your journey focuses on the critical task of monitoring and backup. You will enable diagnostic logging for key services and build custom dashboards in Azure Monitor to visualize the health of your VMs, containers, and functions. We conclude with hardcore disaster recovery scenarios, where you will use Site Recovery to simulate DR events and restore disks from the command line.

By the end of this 150+ lab series, you will have moved far beyond the "certified on paper" stage. You will have the scripts, the command-line expertise, and the hands-on confidence to step into any Azure environment and take control. This is the definitive lab-only course for the modern Azure Administrator—direct, technical, and built for action

Who this course is for:

  • IT professionals preparing specifically for the AZ-104 certification exam
  • System administrators managing cloud infrastructure through the Azure Portal
  • Engineers looking to master PowerShell for Azure automation
  • Developers and admins utilizing Azure CLI for resource management
  • Security and compliance officers managing identity and governance
  • Technical leads overseeing hybrid environments and directory sync

Report abuse