Azure AD tenants and directories - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an Azure AD tenant?

An Azure AD tenant is a dedicated and trusted instance of Azure Active Directory that an organization receives when it signs up for a Microsoft cloud service. It acts like a container for users, groups, and apps.

beginner

How does an Azure AD directory relate to a tenant?

An Azure AD directory is the actual database that stores users, groups, and other identity information. Each Azure AD tenant has exactly one directory associated with it.

intermediate

Can one Azure AD tenant have multiple directories?

No, one Azure AD tenant corresponds to one directory. However, an organization can have multiple tenants, each with its own directory.

intermediate

What is the purpose of having multiple Azure AD tenants?

Multiple tenants can be used to separate environments like development and production, or to isolate different business units or subsidiaries for security and management reasons.

beginner

How do users authenticate in an Azure AD tenant?

Users authenticate by signing in to the Azure AD tenant using their credentials stored in the directory. This allows access to resources and applications registered in that tenant.

What does an Azure AD tenant represent?

A A subscription to Azure virtual machines

B A physical server hosting Azure services

C A storage account in Azure

D A dedicated instance of Azure Active Directory for an organization

An Azure AD tenant is a dedicated instance of Azure Active Directory for an organization.

How many directories can one Azure AD tenant have?

A Multiple directories

B None

C Exactly one directory

D Depends on the subscription

Each Azure AD tenant has exactly one directory associated with it.

Why might an organization use multiple Azure AD tenants?

A To separate environments or business units

B To increase storage space

C To reduce network latency

D To share the same directory across companies

Multiple tenants help separate environments or business units for security and management.

What is stored inside an Azure AD directory?

A Network configurations

B User identities, groups, and app registrations

C Database backups

D Virtual machine images

The directory stores user identities, groups, and app registrations.

How do users access resources in an Azure AD tenant?

A By authenticating with credentials stored in the tenant's directory

B By connecting to a VPN

C By using a shared password across tenants

D By requesting access from Microsoft support

Users sign in with credentials stored in the tenant's directory to access resources.

Explain what an Azure AD tenant and directory are, and how they relate to each other.

Think of tenant as the container and directory as the data inside.

Describe reasons why an organization might have multiple Azure AD tenants.

Consider organizational structure and security needs.