Azure AD Administrative Units

[@davidespano8674]

Excellent!

[@James-sc1lz]

As usual, great vide and thanks for sharing. It took me slightly longer than I anticipated to completely understand how these worked because of the interface which makes things hard to follow. Could me improved in the portal. For example, the roles feature does not tell you which role was chosen or members or even how many. You need to go into each of them to find out. I am not sure if this was just laziness by Microsoft or just poor design because it would only take a few minutes to add some columns to that page. Microsoft have a habit of doing this. Information needs be be better in the portal. I wanted to learn the differences between assignment types and hovered over information and it states "make your selection". I mean seriously. Completely pointless. Negative comments aside we have been waiting for this for ages so glad it is now available. I guess we just need to make sure accounts are not global admins otherwise it defeats the purpose. It might require everything but user admin or helpdesk admin for example.

[@marcioguerreiro8813]

hi Travis! all your videos are amazing! good job! any chance you come up with an idea (video) of how to shrink the O.S. VM drive(azure)? you can increase but not shrink

[@BijouBakson]

Tempting to think it's like OU, but they're not same the same, are they?

[@johnleura909]

Yes, you can think of administrative units (AUs) in Azure AD as a similar concept to organizational units (OUs) in Active Directory. Both are used to organize and manage resources within a larger directory structure. **Key similarities:** * **Hierarchical structure:** Both AUs and OUs allow you to create a hierarchical structure to organize resources. * **Permission delegation:** You can delegate administrative permissions to specific users or groups within AUs or OUs, allowing them to manage resources within their assigned scope. * **Policy application:** While not as extensive as Group Policy Objects (GPOs) in Active Directory, AUs can be used to apply certain policies and settings to resources within their scope. **Key differences:** * **Scope of control:** AUs primarily focus on managing access to Azure AD resources, such as users, groups, and applications, while OUs can be used to manage a wider range of resources, including file shares, printers, and other network devices. * **Management interface:** AUs are managed primarily through the Azure portal and PowerShell, while OUs are typically managed using Active Directory tools like Active Directory Users and Computers. **In summary:** While AUs and OUs share some similarities, they are not identical. AUs are a powerful tool for managing Azure AD resources and permissions, but they may not offer the same level of granular control as OUs in Active Directory. It's important to understand the specific use cases and limitations of each before making a decision on how to organize and manage your resources.

[@BijouBakson]

@@johnleura909 Well, you took your time, didn't you? That conversation was way back when I was still in my infancy in Azure. I think I was preparing for A-104. I do appreciate your effort here though both here and in making your video! Certainly helped me. Thank you

[@rodrigo16medeiros]

2022/4 - Dynamic Assignment is currently in Preview.

[@Ciraltos]

Good to hear!