Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,976 matching terms. Narrow the search to reduce the list.
AI and Machine Learning
premium
Azure OpenAI managed identity
Azure OpenAI managed identity uses Microsoft Entra identities so Azure workloads can call model endpoints without stored keys.
Azure OpenAI
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Containers
premium
AKS managed identity
An AKS managed identity is a Microsoft Entra identity that an AKS cluster uses to manage Azure resources without stored service principal secrets.
AKS identity
Intermediate
5 commands
Aliases: Azure Kubernetes Service managed identity, aks managed identity
Quick peek
Open full term page
Identity
premium
Azure tenant
An Azure tenant is the Microsoft Entra directory that provides identity and access management for users, groups, applications, service principals, devices, and Azure resources associated with an organization.
Azure identity
fundamentals
5 commands
Aliases: tenant, Microsoft Entra tenant, tenant ID
Quick peek
Open full term page
Identity
premium
Managed identity
A managed identity is an automatically managed Microsoft Entra identity assigned to a supported Azure resource. It lets workloads authenticate to services that support Microsoft Entra authentication without storing passwords, certificates, or client secrets in code, configuration, or deployment pipelines.
Microsoft Entra workload identity
intermediate
3 commands
Aliases: Managed identity, system-assigned managed identity, user-assigned managed identity, Azure workload identity, secretless authentication, system-assigned identity, user-assigned identity, Microsoft Entra ID, Microsoft Entra workload identity
Quick peek
Open full term page
Identity
verified
Resource identity
A resource identity is the Azure identity a workload uses when it needs permission to call another service. Most teams see it as a system-assigned or user-assigned managed identity on a VM, App Service, Function, container app, automation account, or data service. Instead of storing a password or client secret, the resource receives a Microsoft Entra identity and uses tokens. Operators then grant that identity roles on Key Vault, Storage, SQL, Cosmos DB, or other dependencies.
Identity operations
fundamentals
5 commands
Aliases: Workload identity for a resource, Managed identity surface
Quick peek
Open full term page
Identity
field-manual-complete
User-assigned managed identity
A standalone managed identity that can be attached to one or more Azure resources.
Managed identities
fundamentals
5 commands
Aliases: UAMI, user managed identity, reusable managed identity
Quick peek
Open full term page
Compute
verified
VM user-assigned identity
VM user-assigned identity is a reusable managed identity resource attached to a virtual machine so software on that VM can request Microsoft Entra tokens without stored credentials. Its lifecycle and permissions are managed separately from the VM across rebuilds and fleets.
Virtual Machines
intermediate
5 commands
Aliases: VM user-assigned managed identity, user-assigned managed identity for virtual machines, virtual machine user-assigned identity, managed identity attached to VM
Quick peek
Open full term page
Identity
premium
Service principal
A service principal is the local Microsoft Entra identity for an application or automation instance in a tenant. It represents the app for sign-in, consent, and authorization, and it can receive Azure RBAC roles or API permissions without using a human user account.
Azure identity
fundamentals
6 commands
Aliases: Microsoft Entra service principal, Service principal, application service principal, automation identity, service principal, service-principal
Quick peek
Open full term page
Identity
verified
RBAC
Azure role-based access control is an authorization system built on Azure Resource Manager. It grants users, groups, service principals, and managed identities specific roles at management group, subscription, resource group, resource, or environment scopes so teams can apply least privilege.
Azure identity
fundamentals
5 commands
Aliases: Azure RBAC, role-based access control, role based access control
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace managed identity
A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service...
Synapse Analytics
intermediate
8 commands
Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity
Quick peek
Open full term page
Identity
learning-path-anchor
System-assigned managed identity
A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request...
Managed identities
intermediate
4 commands
Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI
Azure OpenAI provides OpenAI model capabilities through Azure resources, deployments, identity, networking, quota, and monitoring controls.
Azure OpenAI
intermediate
8 commands
Aliases: Azure OpenAI Service
Quick peek
Open full term page
Developer Tools
premium
Azure CLI
A cross-platform command-line tool for connecting to Azure and executing administrative commands on Azure resources.
Command line
fundamentals
6 commands
Aliases: az, Azure command-line interface
Quick peek
Open full term page
Compute
premium
Azure Functions
Azure Functions is Azure serverless compute for running code from triggers such as HTTP requests, queues, timers, events, and service integrations without managing servers.
Serverless compute
intermediate
6 commands
Aliases: Functions, Function App, serverless functions
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Analytics
premium
Azure Synapse Analytics
Azure Synapse Analytics is Microsoft’s integrated analytics service for enterprise data warehousing, big data, data integration, and exploratory analytics.
Synapse Analytics
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Identity
premium
Federated identity credential
A Federated identity credential is a Microsoft Entra credential object that defines the issuer, subject, and audience trusted for workload identity federation. Teams use it to allow a specific external workload identity to authenticate as an Entra application or user-assigned managed identity without storing a client secret or certificate. It is not a role assignment, token issued by Azure, user sign-in method, broad trust for every workflow in a repository, or evidence that the workload can access resources without RBAC.
Workload identity
intermediate
6 commands
Aliases: Microsoft Entra federated identity credential, FIC, workload identity credential, OIDC federation credential
Quick peek
Open full term page
Containers
premium
Azure Container Registry
A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments.
Container images
fundamentals
5 commands
Aliases: ACR
Quick peek
Open full term page
Analytics
premium
Azure Data Explorer
A fully managed, high-performance analytics service for near-real-time analysis of large telemetry, log, event, and time-series datasets.
Real-time analytics
intermediate
5 commands
Aliases: ADX, Kusto
Quick peek
Open full term page
Analytics
premium
Azure Databricks
A unified, open analytics platform on Azure for building, deploying, sharing, and maintaining enterprise data, analytics, and AI solutions at scale.
Data engineering and AI
intermediate
5 commands
Aliases: Databricks on Azure
Quick peek
Open full term page
Analytics
premium
Azure Databricks Unity Catalog
A unified governance layer in Azure Databricks for data and AI assets, including catalogs, schemas, tables, volumes, models, privileges, and lineage.
Data governance
intermediate
5 commands
Aliases: Unity Catalog
Quick peek
Open full term page
Virtual Desktop Infrastructure
premium
Azure Virtual Desktop
Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control.
Virtual desktops
fundamentals
5 commands
Aliases: AVD
Quick peek
Open full term page
Integration
premium
Event Grid managed identity delivery
Event Grid managed identity delivery is the pattern where Event Grid uses a managed identity on a topic, domain, or system topic to authenticate event delivery to supported destinations. In Azure, it shows up when teams want to deliver events to Azure destinations without storing destination keys or embedding secrets in event subscription configuration. Teams use it to review system-assigned or user-assigned identity, Event Grid topic or domain identity settings, destination RBAC role assignments, delivery identity settings, dead-letter identity settings, and monitoring before changing production behavior.
Event routing
advanced
5 commands
Aliases: Event Grid managed identity event delivery, managed identity delivery for Event Grid
Quick peek
Open full term page
Storage
premium
Kerberos authentication for Azure Files
Kerberos authentication for Azure Files is the identity-based SMB authentication option that lets Azure file shares use Kerberos with a supported directory identity source instead of only storage keys or SAS.
Azure Files
advanced
5 commands
Aliases: Azure Files Kerberos, Microsoft Entra Kerberos for Azure Files, identity-based authentication for Azure Files, SMB Kerberos Azure Files
Quick peek
Open full term page
Containers
premium
Kubelet identity
Kubelet identity controls how AKS nodes authenticate to Azure resources for node-level tasks, especially pulling container images from registries without embedded secrets. Teams see it in aks identity profile, node pools. It is not cluster control-plane identity, workload identity, pod managed identity, service account token, kubeconfig credential, or container registry admin user; confusing them can create image pull failures, overbroad registry access. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
AKS identity
Intermediate
5 commands
Aliases: AKS kubelet identity, node pool kubelet identity, AKS node managed identity, identityProfile kubeletidentity
Quick peek
Open full term page
DevOps
premium
Pipeline in Azure DevOps
A pipeline in Azure DevOps is an automated build, test, and deployment workflow. Microsoft Learn describes Azure Pipelines as CI/CD for many languages, platforms, and targets, with YAML or classic definitions that connect source changes to repeatable delivery stages.
CI/CD
fundamentals
5 commands
Aliases: Azure Pipelines, ADO pipeline, Azure DevOps CI/CD pipeline, YAML pipeline, Azure Pipeline, DevOps pipeline
Quick peek
Open full term page
Integration
premium
Service Bus managed identity
Service Bus managed identity means using Microsoft Entra managed identities so Azure-hosted applications can access Service Bus without stored credentials. Applications receive RBAC roles such as Data Sender or Data Receiver, while Service Bus namespace identities may also be assigned for service-managed scenarios such as encryption configuration.
Service Bus
fundamentals
5 commands
Aliases: Service Bus identity-based access, Service Bus Entra authentication, managed identity for Service Bus, Service Bus secretless authentication, Service Bus RBAC identity
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Content Safety
Azure AI Content Safety is the Azure AI service used to detect harmful text and image content before it reaches users, moderators, or automated workflows. In Azure, teams encounter it when applications accept user posts, comments, uploads, prompts, or model outputs that need moderation and policy review. The useful question is what behavior it proves,
Responsible AI
advanced
4 commands
Aliases: Content Safety, Azure Content Safety, harm detection, content moderation API
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry hub
Azure AI Foundry hub is the classic Foundry hub resource used to group AI projects that share common security, data access, connections, and platform settings. In Azure, teams encounter it when teams need hub-based projects for selected Foundry and Azure Machine Learning scenarios such as fine-tuning, shared connections, and custom ML work. The useful question
AI platform
advanced
4 commands
Aliases: AI Hub, Foundry AI Hub, hub-based project, Azure AI hub
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry project
An Azure AI Foundry project is the working area where a team builds and organizes an AI application inside Microsoft Foundry. It keeps related agents, evaluations, files, indexes, tools, connections, and model usage together instead of scattering them across a shared portal. Think of it as the project boundary for one AI product, prototype, or team. It is useful because AI work quickly becomes messy: prompts, test data, model deployments, safety checks, and access decisions all need a home with ownership and repeatable operations.
AI platform
advanced
4 commands
Aliases: AI Foundry project, AI project, Foundry project, Microsoft Foundry project
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Language
Azure AI Language is the Azure natural-language processing service for analyzing and understanding text with prebuilt and customizable language capabilities.
AI services
intermediate
4 commands
Aliases: Azure Language, Azure Language in Foundry Tools, Azure Language service, Language in Foundry Tools, Language service
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI metrics
Azure AI metrics is the measurable signals used to observe Azure AI applications, model endpoints, agents, evaluations, safety checks, and business outcomes.
Azure AI services
intermediate
4 commands
Aliases: AI metrics, AI service metrics, Azure AI Metrics Advisor, Azure Monitor metrics for AI, Metrics Advisor, time series anomaly detection
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search data source
Azure AI Search data source is the connection definition an Azure AI Search indexer uses to read content from a supported external data store.
AI platform and search
intermediate
4 commands
Aliases: Search data source, SearchIndexerDataSourceConnection, data source connection, indexer data source, search data source connection
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search service
Azure AI Search service is the Azure resource that hosts Azure AI Search indexes, indexers, skillsets, keys, capacity, networking, and query endpoints.
AI platform and search
intermediate
4 commands
Aliases: AI Search resource, AI Search service, Azure Search service, Search service, search service
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Search skillset
Azure AI Search skillset is a reusable Azure AI Search enrichment object that applies built-in or custom processing during indexer execution.
AI platform and search
intermediate
4 commands
Aliases: AI enrichment skillset, Search skillset, cognitive skillset, skillset
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI services
Azure AI services is the family of Azure cloud AI APIs and resources, surfaced through Foundry Tools, for vision, speech, language, translation, content, and generative scenarios.
AI services
fundamentals
4 commands
Aliases: AI services, Azure AI services account, Cognitive Services, Foundry Tools
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI services account
An Azure resource that provides endpoints, keys, identity, networking, billing, and monitoring for one or more Azure AI service capabilities.
Azure AI services
fundamentals
4 commands
Aliases: AI services account, Azure AI multi-service resource, Foundry resource, Microsoft.CognitiveServices account
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled Kubernetes
An Azure Arc capability that connects Kubernetes clusters running anywhere to Azure for centralized management, governance, security, and application operations.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled Kubernetes, Azure Arc Kubernetes, connected Kubernetes cluster
Quick peek
Open full term page
Hybrid and Multicloud
premium
Azure Arc-enabled server
A Windows or Linux physical server or virtual machine outside Azure that is connected to Azure Arc and managed as an Azure resource.
Hybrid management
fundamentals
4 commands
Aliases: Arc-enabled server, Azure Arc server, connected machine, hybrid machine
Quick peek
Open full term page
Databases
premium
Azure SQL transparent data encryption
Azure SQL Transparent Data Encryption helps protect Azure SQL Database data, log files, and backups at rest by encrypting and decrypting database pages without requiring application changes.
Azure SQL Database
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium
Data Factory managed identity
The Microsoft Entra identity assigned to a Data Factory so pipelines and linked services can access Azure resources without embedded passwords.
Data integration and orchestration
Intermediate
4 commands
Aliases: Data Factory managed identity, ADF managed identity, data factory managed identity
Quick peek
Open full term page
Internet of Things
premium
Device identity
A device identity is the IoT Hub identity registry entry that represents a permitted device or module, including its device ID, authentication material, status, and connection-related metadata.
IoT identity
fundamentals
4 commands
Aliases: IoT Hub device identity, IoT device registry identity, device registry entry, IoT device ID
Quick peek
Open full term page
DevOps
premium
Environment in Azure DevOps
An Azure DevOps environment is a logical collection of resources that a pipeline can target for deployments, approvals, checks, and deployment history.
Azure Pipelines
fundamentals
4 commands
Aliases: environment in azure devops
Quick peek
Open full term page
Web
premium
Function app managed identity
Function app managed identity is a Microsoft Entra identity assigned to a function app so its code and supported bindings can access Azure resources without storing passwords or connection strings. Teams use it to replace secrets in app settings with identity-based access to services such as Storage, Service Bus, Key Vault, Event Hubs, SQL, or monitoring resources. In daily Azure work, it shows up when engineers grant a function app data-plane permissions, remove leaked connection strings, configure identity-based bindings, or investigate why a trigger cannot reach its dependency.
Azure Functions
intermediate
4 commands
Aliases: Azure Functions managed identity, managed identity for Functions, function app identity
Quick peek
Open full term page
Identity
premium
Identity Governance
Identity Governance is a Microsoft Entra set of capabilities for managing identity lifecycle, access lifecycle, access reviews, entitlement management, and privileged access.
Identity operations
intermediate
4 commands
Aliases: Entra ID Governance, identity governance, Identity Governance, Microsoft Entra Identity Governance
Quick peek
Open full term page
Identity
premium
Identity Protection
Identity Protection is a Microsoft Entra capability that detects, investigates, and helps remediate risky users and risky sign-ins.
Security
intermediate
4 commands
Aliases: Entra ID Protection, identity protection, Identity Protection, identity risk protection, Microsoft Entra ID Protection
Quick peek
Open full term page
Integration
premium
Logic Apps managed identity
A Logic Apps managed identity is the Microsoft Entra identity assigned to a Logic Apps workflow or Standard logic app resource so the workflow can authenticate to supported Azure resources without storing passwords, shared keys, or long-lived secrets in governed production environments.
Azure Logic Apps
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Security
premium
Managed identity for data access
Managed identity for data access is the pattern of using a managed identity to let a workload read or write data without embedded secrets. Teams use it when pipelines, applications, jobs, or analytics services need secure access to storage, databases, or other data services. In plain English, it gives operators a named control for least-privilege data access, reduced secret exposure, and cleaner audit trails instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear.
Data access security
intermediate
3 commands
Aliases: Managed identity for data access, Microsoft Entra ID, Data access security
Quick peek
Open full term page
Identity
premium
Assignment managed identity
Assignment managed identity is the identity Azure Policy uses when a policy assignment must change resources during remediation. It matters most for effects such as modify and deployIfNotExists, where Policy is not just reporting non-compliance but attempting to fix or deploy something. The identity needs Azure RBAC permissions at the right scope. Without those.
Azure Policy
intermediate
2 commands
Aliases: Policy assignment identity, Azure Policy managed identity, policy remediation identity, assignment identity
Quick peek
Open full term page
Databases
premium
Azure SQL logical server
An Azure SQL logical server is a logical administrative construct for Azure SQL Database and related SQL resources. Microsoft Learn describes it as the central point for managing a collection of databases, including logins, firewall rules, auditing, threat detection policies, and failover groups.
Azure SQL Database
fundamentals
16 commands
Aliases: No aliases yet
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search