Study guide for Exam SC-300: Microsoft Identity and Access Administrator

This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.

Useful links Description
Review the skills measured as of July 30, 2024 This list represents the skills measured AFTER the date provided. Study this list if you plan to take the exam AFTER that date.
Review the skills measured prior to July 30, 2024 Study this list of skills if you take your exam PRIOR to the date provided.
Change log You can go directly to the change log if you want to see the changes that will be made on the date provided.
How to earn the certification Some certifications only require passing one exam, while others require passing multiple exams.
Certification renewal Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
Your Microsoft Learn profile Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
Exam scoring and score reports A score of 700 or greater is required to pass.
Exam sandbox You can explore the exam environment by visiting our exam sandbox.
Request accommodations If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
Take a free Practice Assessment Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.

We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. Although Microsoft makes every effort to update localized versions as noted, there may be times when the localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.

Note

The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.

Note

Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Skills measured as of July 30, 2024

Audience profile

As a Microsoft identity and access administrator, you design, implement, and operate an organization’s identity and access management by using Microsoft Entra. You configure and manage identities throughout their lifecycles for users, devices, Microsoft Azure resources, and applications.​ You are responsible for ensuring the application of Zero Trust principles for identity and access solutions.

As an identity and access administrator, you provide seamless experiences and self-service management capabilities for users. You plan and implement identity, authentication, and authorization to enable access across applications and resources. You’re also responsible for troubleshooting, monitoring, and reporting on identity and access. ​

You collaborate with many other roles in the organization to drive strategic identity projects, modernize identity solutions, implement hybrid identity solutions, and implement identity governance.​

You should be familiar with Azure, Microsoft 365 services and workloads, and Active Directory Domain Services (AD DS). You should also be familiar with PowerShell and Kusto Query Language (KQL).

Skills at a glance

Implement and manage user identities (20–25%)

Configure and manage a Microsoft Entra tenant

Create, configure, and manage Microsoft Entra identities

Implement and manage identities for external users and tenants

Implement and manage hybrid identity

Implement authentication and access management (25–30%)

Plan, implement, and manage Microsoft Entra user authentication

Plan, implement, and manage Microsoft Entra Conditional Access

Manage risk by using Microsoft Entra ID Protection

Implement access management for Azure resources by using Azure roles

Implement Global Secure Access

Plan and implement workload identities (20–25%)

Plan and implement identities for applications and Azure workloads

Plan, implement, and monitor the integration of enterprise applications

Plan and implement app registrations

Manage and monitor app access by using Microsoft Defender for Cloud Apps

Plan and automate identity governance (25–30%)

Plan and implement entitlement management in Microsoft Entra

Plan, implement, and manage access reviews in Microsoft Entra

Plan and implement privileged access

Monitor identity activity by using logs, workbooks, and reports

Plan and implement Microsoft Entra Permissions Management

Study resources

We recommend that you train and get hands-on experience before you take the exam. We offer self-study options and classroom training as well as links to documentation, community sites, and videos.

Study resources Links to learning and documentation
Get trained Choose from self-paced learning paths and modules or take an instructor-led course
Find documentation Microsoft Entra ID documentation
Azure Identity Management and access control security best practices
Microsoft Entra External Identities documentation
Azure AD Multi-Factor Authentication overview
Microsoft Defender for Cloud documentation
What is Microsoft Entra ID Governance?
What is Privileged Identity Management?
What is Azure Active Directory monitoring and health?
Microsoft security documentation
Ask a question Microsoft Q&A | Microsoft Docs
Get community support Security, compliance, and identity community hub
Follow Microsoft Learn Microsoft Learn - Microsoft Tech Community
Find a video Exam Readiness Zone
Browse other Microsoft Learn shows

Change log

Key to understanding the table: The topic groups (also known as functional groups) are in bold typeface followed by the objectives within each group. The table is a comparison between the two versions of the exam skills measured and the third column describes the extent of the changes.

Skill area prior to July 30, 2024 Skill area as of July 30, 2024 Change
Audience profile Major
Implement and manage user identities Implement and manage user identities No change
Configure and manage a Microsoft Entra tenant Configure and manage a Microsoft Entra tenant Minor
Create, configure, and manage Microsoft Entra identities Create, configure, and manage Microsoft Entra identities Minor
Implement and manage identities for external users and tenants Implement and manage identities for external users and tenants Minor
Implement and manage hybrid identity Implement and manage hybrid identity Minor
Implement authentication and access management Implement authentication and access management No change
Plan, implement, and manage Microsoft Entra user authentication Plan, implement, and manage Microsoft Entra user authentication Minor
Plan, implement, and manage Microsoft Entra Conditional Access Plan, implement, and manage Microsoft Entra Conditional Access Major
Manage risk by using Microsoft Entra ID Protection Manage risk by using Microsoft Entra ID Protection Minor
Implement access management for Azure resources by using Azure roles Implement access management for Azure resources by using Azure roles Minor
Implement Global Secure Access New
Plan and implement workload identities Plan and implement workload identities No change
Plan and implement identities for applications and Azure workloads Plan and implement identities for applications and Azure workloads No change
Plan, implement, and monitor the integration of enterprise applications Plan, implement, and monitor the integration of enterprise applications No change
Plan and implement application registrations Plan and implement app registrations Minor
Manage and monitor app access by using Microsoft Defender for Cloud Apps Manage and monitor app access by using Microsoft Defender for Cloud Apps No change
Plan and implement identity governance Plan and automate identity governance % of the exam increased
Plan and implement entitlement management in Microsoft Entra Plan and implement entitlement management in Microsoft Entra No change
Plan, implement, and manage access reviews in Microsoft Entra Plan, implement, and manage access reviews in Microsoft Entra No change
Plan and implement privileged access Plan and implement privileged access No change
Monitor identity activity by using logs, workbooks, and reports Monitor identity activity by using logs, workbooks, and reports Minor
Plan and implement Microsoft Entra Permissions Management Plan and implement Microsoft Entra Permissions Management No change

Skills measured prior to July 30, 2024

Audience profile

As a Microsoft identity and access administrator, you design, implement, and operate an organization’s identity and access management by using Microsoft Entra ID. You configure and manage the full cycle of identities for:

As an identity and access administrator, you provide seamless experiences and self-service management capabilities for users. You plan and implement identity, authorization, and access to connect applications and resources in Azure. You’re also responsible for troubleshooting, monitoring, and reporting on identity and access. You collaborate with many other roles in the organization to:

You should be familiar with Azure, Microsoft 365 services and workloads, and Active Directory Domain Services (AD DS). You should have experience:

Skills at a glance

Implement and manage user identities (20–25%)

Configure and manage a Microsoft Entra tenant

Create, configure, and manage Microsoft Entra identities

Implement and manage identities for external users and tenants

Implement and manage hybrid identity

Implement authentication and access management (25–30%)

Plan, implement, and manage Microsoft Entra user authentication

Plan, implement, and manage Microsoft Entra Conditional Access

Manage risk by using Microsoft Entra ID Protection

Implement access management for Azure resources by using Azure roles

Plan and implement workload identities (20–25%)

Plan and implement identities for applications and Azure workloads

Plan, implement, and monitor the integration of enterprise applications

Plan and implement app registrations

Manage and monitor app access by using Microsoft Defender for Cloud Apps

Plan and implement identity governance (20–25%)

Plan and implement entitlement management in Microsoft Entra

Plan, implement, and manage access reviews in Microsoft Entra

Plan and implement privileged access

Monitor identity activity by using logs, workbooks, and reports

Plan and implement Microsoft Entra Permissions Management