Trips
Short, practical Azure walkthroughs built around real-world use cases.
Identity / Microsoft Entra ID46
- Admin Account Needs Extra Protection? Require MFA for Admins
- Admin Needs Emergency Fallback? Create Emergency Access Account
- Admin Role Should Be Temporary? Enable PIM
- Admin Tasks Need Stronger Login? Require Authentication Strength
- API Needs User Permissions? Expose a Delegated Scope
- App Needs Certificate Authentication? Upload Certificate Credential
- App Needs Microsoft Graph Access? Configure API Permissions
- App Needs Role-Based Access? Assign App Roles to Users and Groups
- Azure DevOps Pipeline Needs Azure Access? Configure Azure DevOps Federation
- Background App Needs Access? Use Client Credentials Flow
- Background App Needs Access? Use Managed Identity
- CLI Tool Needs Login? Use Device Code Flow
- Company Wants a Branded Login Page? Configure Company Branding
- Company Wants Custom Domain Login? Add a Custom Domain
- Company Wants Passwordless Login? Register Passkey
- Confused by Sign-In Flows? Compare Microsoft Entra Authentication Flows
- Contractor Needs Temporary Access? Invite a B2B Guest User
- Contractor Needs Time-Limited Access? Create an Access Package
- Customer Identities Need Sign-Up/Sign-In? Configure External ID
- Department Needs Collaboration Mailbox or Team? Create a Microsoft 365 Group
- Devices Should Join Group Automatically? Create a Dynamic Device Group
- Enterprise App Should Not Be Open to Everyone? Require User Assignment
- Guest Access Must Be Reviewed? Create an Access Review
- Helpdesk Should Manage Only One Department? Create an Administrative Unit
- HR Sends 50 New Users? Bulk Create Users
- Login Failed? Review Sign-In Logs
- New Employee Needs Azure Access? Create a Microsoft Entra User
- Old Apps Use Insecure Sign-In? Block Legacy Authentication
- Only Office Countries Should Sign In? Configure Named Locations
- Partner Needs Access? Configure Cross-Tenant Access
- Partner Users Must Sync Automatically? Configure Cross-Tenant Synchronization
- Risky Sign-In Detected? Configure Sign-In Risk Policy
- SaaS App Needs SSO? Create Enterprise Application
- SPA Needs Secure Login? Use Authorization Code Flow with PKCE
- Team Needs Shared Permissions? Create a Security Group
- User Has No Phone Yet? Create Temporary Access Pass
- User Left the Company? Disable the Entra Account and Revoke Sessions
- User Needs Verifiable Digital Credential? Configure Verified ID
- User Risk Must Be Remediated? Configure User Risk Policy
- User Was Deleted by Mistake? Restore Deleted User
- Users Need Password Reset Without Admin? Configure Self-Service Password Reset
- Users Request App Permissions? Configure Admin Consent Workflow
- Users Should Join Group Automatically? Create a Dynamic User Group
- Web App Needs User Login? Use Authorization Code Flow
- Who Changed Identity Settings? Review Audit Logs
- Workload Should Not Store Secrets? Configure Workload Identity Federation
Governance, Subscriptions, Cost, and Resource Management27
- Azure Billing Hierarchy Is Confusing? Understand MCA Billing Scopes
- Built-In Role Is Too Broad? Create a Custom Azure Role
- Cloud Adoption Needs Standard Patterns? Configure CAF Archetypes
- Company Needs a Custom Rule? Create a Custom Policy Definition
- Costs Need Department Tracking? Apply Azure Tags
- Deployment Fails Because a Provider Is Missing? Register the Resource Provider
- Leadership Needs a Cloud Cost View? Create a FinOps Dashboard
- Monthly Spend Must Be Controlled? Create an Azure Budget
- Multiple Policies Must Apply Together? Create a Policy Initiative
- Multiple Subscriptions Need a Hierarchy? Create a Management Group
- Need a Standard Enterprise Structure? Create a Landing Zone Structure
- Need Access to Only One Resource? Assign a Role at Resource Scope
- Need Cost and Security Recommendations? Review Azure Advisor
- Need to Know Why a User Has Access? Check Access Assignments
- Need to Search Across Subscriptions? Use Azure Resource Graph
- New Subscriptions Must Be Consistent? Configure Subscription Vending
- Predictable Usage Should Cost Less? Configure Reservations
- Regional Deployment Fails Because of Quota? Check Usage and Quotas
- Resource Is in the Wrong Group? Move It to the Correct Resource Group
- Resource Must Not Be Deleted? Create a Delete Lock
- Resource Must Not Be Modified? Create a Read-Only Lock
- Resources Must Only Be in Approved Regions? Assign Azure Policy
- Subscription Needs Governance? Manage Its Settings
- Team Needs a Spend Warning? Create a Cost Alert
- Temporary Exception Needed? Configure a Policy Exemption
- User Needs Limited Azure Access? Assign an RBAC Role
- You Need a Clean Project Boundary? Create a Resource Group
Infrastructure as Code with Bicep10
- Manual Deployments Are Inconsistent? Deploy a Storage Account with Bicep
- Hard-Coded Templates Cannot Be Reused? Use Parameters, Variables, and Outputs
- DEV, TEST, and PROD Need Different Values? Use Bicep Parameter Files
- Connected Resources Are Difficult to Maintain? Use References and Dependencies
- Repeated Resource Definitions Create Duplication? Use Conditions and Loops
- One Bicep File Has Become Too Large? Create Modules
- Some Resources Exist Above the Resource Group? Use Deployment Scopes
- Infrastructure Changes Are Too Risky to Deploy Blindly? Validate and Test Bicep
- Manual Bicep Deployment Does Not Scale? Deploy with GitHub Actions
- Teams Keep Rebuilding the Same Azure Patterns? Use Azure Verified Modules