Prepared by: Bikash Raya
| File | Description |
|---|---|
| Azure_Cloud_Environment_Setup_Identity_Management.pdf | Hands-on lab walkthrough with screenshots |
This repository documents the setup and administration of a Microsoft Azure cloud environment focused on infrastructure provisioning, identity management, automation, and access control.
The project includes deployment of a Windows Server 2016 virtual machine, configuration of users and security groups using Microsoft Entra ID, implementation of dynamic group membership rules, and Role-Based Access Control (RBAC) using custom roles.
This lab simulates real-world enterprise cloud administration practices.
| Task | Objectives |
|---|---|
| 1 | Create Azure Resource Group (MoonTechRG) |
| 2 | Deploy Windows Server 2016 VM (MoonTechVM) |
| 3 | Configure Azure CLI-based deployment |
| 4 | Create and manage Entra ID users |
| 5 | Configure security groups (Sales & Marketing) |
| 6 | Implement dynamic group membership rules |
| 7 | Assign users based on attributes (Department) |
| 8 | Configure RBAC custom roles |
| 9 | Validate identity & access configuration |
| Cloud Skills | Identity & Security | Automation |
|---|---|---|
| Microsoft Azure | Microsoft Entra ID | Azure CLI |
| VM Deployment | User & Group Management | Infrastructure Automation |
| Resource Management | RBAC (Role-Based Access Control) | Dynamic Group Rules |
| Cloud Architecture | Access Control Policies | Identity Governance |
- Created resource group MoonTechRG in Australia East region
- Deployed Windows Server 2016 VM (MoonTechVM)
- Configured networking and storage resources
- Created users:
- Tim
- Jack
- Ronaldo
- Messi
- Created security groups:
- MoonTechSales
- MoonTechMarketing
- Assigned department attributes (Sales / Marketing)
- Configured automatic group membership rules
- Eliminated manual user assignment process
- Created custom roles:
- SalesAdmin
- MarketingAdmin
- Assigned roles to users:
- Ronaldo → SalesAdmin
- Messi → MarketingAdmin
- Implemented delegated administration model
- Verified automatic group assignment
- Confirmed RBAC role permissions
- Tested identity and access configurations
This project demonstrates practical Azure cloud administration skills, including infrastructure deployment, identity management, automation using Azure CLI, and secure access control using RBAC and dynamic group membership.
Part of the Bikash Security Lab series:
📄 Thanks for reading! For a full hands-on walkthrough of this lab with screenshots — download the lab report here
⭐ If you find this project useful, feel free to star the repository ⭐