Search Azure terms

Identity premium App role An app role is an application-defined permission or responsibility, such as Reader, Approver, or Orders.Write. The resource application defines the role, and users, groups, or client applications can be assigned to it. When the user or application gets a token, the role can appear as a claim for. Identity operations fundamentals 4 commands Aliases: application role, Microsoft Entra app role Quick peek Open full term page

Identity premium Microsoft Entra group Entra group means a Microsoft Entra ID group object used to manage membership, access assignments, application permissions, and governance workflows as a unit. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Directory groups intermediate 4 commands Aliases: Entra group, Azure AD group, directory group Quick peek Open full term page

Identity premium Directory A directory is the Microsoft Entra identity container associated with users, groups, applications, service principals, devices, and tenant-level identity configuration. Tenant identity fundamentals 4 commands Aliases: Microsoft Entra directory, tenant directory, identity directory, Azure AD directory Quick peek Open full term page

Identity premium Directory role A directory role grants permissions to manage Microsoft Entra tenant resources such as users, groups, applications, devices, roles, and security settings. Privileged access intermediate 4 commands Aliases: Microsoft Entra role, administrator role, Entra directory role, tenant administrator role Quick peek Open full term page

Storage premium Data Lake directory A directory in Azure Data Lake Storage Gen2 is a hierarchical namespace path segment that can contain files and child directories and can have access controls applied. Data Lake Storage Gen2 fundamentals 5 commands Aliases: ADLS directory, Data Lake folder, Gen2 directory, lake folder Quick peek Open full term page

Identity learning-path-anchor Tenant ID A tenant ID is the globally unique identifier for a Microsoft Entra tenant. Microsoft Entra fundamentals 4 commands Aliases: Tenant ID, tenant id, Azure Tenant ID, Microsoft Entra tenant ID, directory ID, tenantId Quick peek Open full term page

Storage learning-path-anchor Data Lake storage account A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context. Data Lake Storage Gen2 advanced 19 commands Aliases: No aliases yet Quick peek Open full term page

Identity premium Azure tenant An Azure tenant is the Microsoft Entra directory that provides identity and access management for users, groups, applications, service principals, devices, and Azure resources associated with an organization. Azure identity fundamentals 5 commands Aliases: tenant, Microsoft Entra tenant, tenant ID Quick peek Open full term page

Storage premium Data Lake partition folder A Data Lake partition folder is a directory pattern, often key=value, that groups files by values such as date, region, tenant, or business domain for efficient reads. Data Lake Storage Gen2 intermediate 5 commands Aliases: partition folder, Hive-style partition folder, date partition folder, lake partition path Quick peek Open full term page

Integration premium Event Hubs namespace An Event Hubs namespace is the management container for one or more event hubs and controls shared settings such as network access, SKU, capacity, and authorization. Teams use it to group event hubs under one managed Azure resource boundary for scale, networking, authorization, monitoring, and operational ownership. It is not an individual event hub stream, a consumer group, a storage account, or a generic directory folder. In production, confirm the namespace, event hub, partitions, identity, network path, consumer groups, checkpoints, metrics, owner, and rollback plan before treating the stream design as healthy. Event Hubs intermediate 5 commands Aliases: Azure Event Hubs namespace, namespace, Event Hubs resource container Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL CETAS Synapse SQL CETAS means CREATE EXTERNAL TABLE AS SELECT. It creates external table metadata and exports the result of a T-SQL SELECT statement in parallel to files in Azure Storage or Azure Data Lake Storage Gen2 for later SQL or lake consumption. Synapse Analytics fundamentals 6 commands Aliases: CREATE EXTERNAL TABLE AS SELECT, CETAS, Synapse CETAS, serverless SQL CETAS Quick peek Open full term page

Storage learning-path-anchor Sync group A sync group is the container that tells Azure File Sync which cloud file share and which Windows Server folders should stay synchronized. Think of it as one file namespace with a hub in Azure and one or more on-premises or edge locations attached to it. If two groups represent different shares or business... Files, queues, and tables fundamentals 6 commands Aliases: Azure File Sync group, file sync group, sync topology, storage sync group Quick peek Open full term page

Storage premium Access ACL An access ACL is path-level permission in ADLS Gen2. It decides who can read, write, or traverse a file or directory. It works alongside Azure RBAC, so storage access often depends on both role assignments and ACL entries. Data Lake Storage Gen2 fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Identity premium Entitlement management Entitlement management uses access packages to govern access to groups, applications, SharePoint sites, and other resources for internal and external identities. Identity Governance intermediate 4 commands Aliases: Microsoft Entra entitlement management, Entra entitlement management, access package governance Quick peek Open full term page

Identity premium Group A Microsoft Entra group is an identity object that collects users, devices, service principals, or other groups so access, collaboration, or administration can be managed together. Microsoft Entra fundamentals 4 commands Aliases: Microsoft Entra group, security group, Microsoft 365 group Quick peek Open full term page

Identity premium Guest user A guest user is an external identity invited into a Microsoft Entra tenant so a partner, contractor, or external collaborator can access approved resources. External identities fundamentals 4 commands Aliases: B2B guest user, external guest user, Microsoft Entra guest Quick peek Open full term page

Identity premium Microsoft Entra ID Microsoft Entra ID is the cloud identity platform that stores tenant identities and provides authentication, authorization, application registration, and access governance for Azure. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline. Identity platform fundamentals 4 commands Aliases: Entra ID, Azure Active Directory, Azure AD, AAD Quick peek Open full term page

Management and Governance learning-path-anchor Tags Tags are labels you attach to Azure things so people and tools can understand what they are for. A tag has a name and a value, such as Owner=DataPlatform or Environment=Prod. Tags do not make a virtual machine faster, secure a database, or change a web app setting. They make the estate easier to organize, report on, govern, and automate. Useful tags answer questions the business actually asks: who owns this, what does it support, what environment is it, and who pays for it? Tags and naming advanced 5 commands Aliases: Azure tags, resource tags, name-value tags, Azure metadata tags Quick peek Open full term page

Management and Governance learning-path-anchor Tenant deployment A tenant deployment is a Resource Manager deployment executed at Microsoft Entra tenant scope. ARM deployments intermediate 5 commands Aliases: Tenant deployment, tenant deployment, Azure Tenant deployment, tenant scope deployment, az deployment tenant, ARM tenant deployment Quick peek Open full term page

Management and Governance learning-path-anchor Tenant scope Tenant scope is the highest Azure Resource Manager deployment and governance context tied to a Microsoft Entra tenant. Management scopes fundamentals 5 commands Aliases: Tenant scope, tenant scope, Azure Tenant scope, tenant level scope, ARM tenant scope, targetScope tenant Quick peek Open full term page

Analytics learning-path-anchor Databricks schema A Unity Catalog namespace under a catalog that groups tables, views, volumes, models, functions, and permissions. Databricks fundamentals 4 commands Aliases: Unity Catalog schema, Databricks database schema, schema in Unity Catalog Quick peek Open full term page

Storage learning-path-anchor Table batch operation A Table batch operation lets an application change several Azure Table entities together instead of sending separate requests and hoping they all succeed. It is useful when records belong to the same partition and must stay consistent, such as a header row plus related detail rows. The important limitation is strict: the entities must... Table Storage intermediate 4 commands Aliases: entity group transaction, Table Storage batch, batch transaction, partition-scoped batch Quick peek Open full term page

Management and Governance learning-path-anchor Tenant root group The tenant root group is the highest management group scope associated with a Microsoft Entra tenant. Management groups fundamentals 4 commands Aliases: Tenant root group, tenant root group, Azure Tenant root group, root management group, root group Quick peek Open full term page

Databases premium Azure SQL logical server An Azure SQL logical server is a logical administrative construct for Azure SQL Database and related SQL resources. Microsoft Learn describes it as the central point for managing a collection of databases, including logins, firewall rules, auditing, threat detection policies, and failover groups. Azure SQL Database fundamentals 16 commands Aliases: No aliases yet Quick peek Open full term page

Storage command-rich Table partition key A Table partition key is the value that groups related entities in Azure Table Storage. Think of it as the first address line for a record. Entities with the same PartitionKey sit in the same logical partition and can be queried together more efficiently. The PartitionKey combines with RowKey to uniquely identify one entity. Choosing it well is a design decision, not just a... Storage platform intermediate 5 commands Aliases: Azure Table PartitionKey, Table Storage PartitionKey, Table partition key value, PartitionKey property Quick peek Open full term page

Storage verified Path ACL In Azure Data Lake Storage Gen2, a path ACL is a POSIX-like access control list applied to a directory or file path. It works with Azure RBAC and ownership metadata to determine which users, groups, service principals, or managed identities can traverse, read, write, or execute data. Data Lake Storage Gen2 intermediate 5 commands Aliases: Data Lake path ACL, ADLS Gen2 ACL, access ACL, directory ACL, file ACL, POSIX ACL Quick peek Open full term page

Identity field-manual-complete User A user is a Microsoft Entra identity that usually represents a person who can sign in, receive group membership, and be assigned access. Azure uses the user object, its object ID, and its roles to evaluate authentication and authorization decisions. Microsoft Entra ID beginner 5 commands Aliases: Microsoft Entra user, Entra user, user object, human identity, directory user Quick peek Open full term page

Management and Governance premium Azure Policy Azure Policy is a governance service for creating, assigning, and managing rules that evaluate Azure resources. Azure Policy fundamentals 7 commands Aliases: Policy Quick peek Open full term page

Management and Governance premium Azure subscription An Azure subscription is a management, billing, and scale unit for Azure resources. Azure scope fundamentals 7 commands Aliases: subscription Quick peek Open full term page

Storage premium Data Lake analytics workload A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric. Data Lake Storage Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake bronze layer The raw ingestion layer in a lakehouse or medallion architecture where source data first lands with minimal transformation and strong traceability. Data Lake Storage Gen2 Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake curated zone The governed, consumer-ready area of a data lake where cleaned, conformed, and documented datasets are served for reporting, analytics, AI, or downstream applications. Data Lake Storage Gen2 Intermediate 6 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Experiment An Experiment in Azure Machine Learning groups related runs so parameters, metrics, artifacts, models, and lineage can be tracked and compared. Teams use it to organize model training, evaluation, and tuning work so teams can compare runs and reproduce how a model version was produced. It is not a deployed endpoint, a registered model, a notebook file, a compute cluster, or proof that a model is fair, secure, or production-ready. In production, confirm workspace, experiment name, run IDs, parameters, metrics, artifacts, data version, environment, compute target, model registration, owner, and promotion criteria before treating the design as healthy or ready. Machine learning intermediate 6 commands Aliases: Azure ML experiment, MLflow experiment, machine learning experiment Quick peek Open full term page

Identity premium Federated identity credential A Federated identity credential is a Microsoft Entra credential object that defines the issuer, subject, and audience trusted for workload identity federation. Teams use it to allow a specific external workload identity to authenticate as an Entra application or user-assigned managed identity without storing a client secret or certificate. It is not a role assignment, token issued by Azure, user sign-in method, broad trust for every workflow in a repository, or evidence that the workload can access resources without RBAC. Workload identity intermediate 6 commands Aliases: Microsoft Entra federated identity credential, FIC, workload identity credential, OIDC federation credential Quick peek Open full term page

Analytics premium Synapse SQL administrator A Synapse SQL administrator is the Synapse RBAC role focused on serverless SQL access and SQL artifacts. It grants broad serverless SQL pool permissions plus create, read, update, and delete access to published SQL scripts, credentials, and linked services within a workspace. Synapse Analytics intermediate 6 commands Aliases: Synapse SQL Administrator, Synapse SQL admin, SQL administrator in Synapse, Synapse SQL admin role Quick peek Open full term page

Identity premium Access package An access package bundles resources someone may need for a job or project. Instead of asking separately for groups, apps, or sites, a user requests the package, and Entra applies approval, duration, review, and removal rules. Identity operations fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Identity premium Access review An access review is a governance check asking, “Should this access still exist?” It lets owners, managers, users, or admins review access to groups, apps, access packages, and privileged roles, then keep or remove access based on decisions and recommendations. Governance fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium ACR scope map An ACR scope map is a reusable set of repository permissions in Azure Container Registry. It groups actions such as content read, content write, delete, and metadata access, then applies that permission boundary to one or more non-Microsoft Entra registry tokens. Azure Container Registry intermediate 5 commands Aliases: Azure Container Registry scope map, repository scope map, registry token scope map Quick peek Open full term page

DevOps premium Azure DevOps organization The top-level Azure DevOps Services container that connects related projects, users, repositories, pipelines, artifacts, permissions, and organization settings. Azure DevOps fundamentals 5 commands Aliases: Azure DevOps org Quick peek Open full term page

Storage premium Azure file share An Azure file share is a managed cloud share hosted by Azure Files. It behaves like a network file share, but Microsoft runs the storage service instead of your team maintaining file servers, disks, operating systems, and failover. Files, queues, and tables fundamentals 5 commands Aliases: Azure Files share Quick peek Open full term page

Management and Governance premium Azure Lighthouse Azure Lighthouse enables secure delegated management of Azure resources across customer tenants, supporting service providers and central teams with scalable cross-tenant governance. Delegated resource management advanced 5 commands Aliases: Lighthouse, delegated resource management, Microsoft Managed Services delegation Quick peek Open full term page

Databases premium Azure SQL elastic job Azure SQL elastic jobs schedule and run Transact-SQL scripts across one or many Azure SQL databases, including target groups across servers, pools, and subscriptions. Azure SQL Database fundamentals 5 commands Aliases: Azure Elastic Jobs, Azure SQL elastic job, SQL elastic job agent, elastic job agent, elastic jobs Quick peek Open full term page

Databases premium Azure SQL failover group Provide a stable listener endpoint for applications that must survive an Azure SQL regional failover.; Coordinate failover for several related user databases instead of managing each geo-replica separately. Azure SQL Database intermediate 5 commands Aliases: Azure SQL failover group, SQL failover group, auto-failover group, failover group, geo-failover group Quick peek Open full term page

Databases premium Azure SQL geo-restore Azure SQL geo-restore uses geo-replicated backups to restore a database to any logical server in any Azure region when primary-region access is unavailable. Azure SQL Database fundamentals 5 commands Aliases: Azure SQL geo-restore, SQL geo restore, geo-replicated backup restore, geo-restore, regional backup restore Quick peek Open full term page

Virtual Desktop Infrastructure premium Azure Virtual Desktop Azure Virtual Desktop is a desktop and app virtualization service that runs on Azure, delivering Windows desktops and RemoteApp experiences with host pools, session hosts, and flexible control. Virtual desktops fundamentals 5 commands Aliases: AVD Quick peek Open full term page

Identity premium B2B collaboration Microsoft Entra B2B collaboration lets organizations invite external users and business partners to access applications and resources while keeping control of corporate data and access policies. External identities fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Storage premium Data Lake file system A Data Lake file system is the top-level container namespace in Azure Data Lake Storage Gen2 that holds directories and files for analytics workloads. Data Lake Storage Gen2 fundamentals 5 commands Aliases: ADLS file system, Data Lake Storage file system, Gen2 file system, lake container Quick peek Open full term page

Storage premium Data Lake filesystem Data Lake filesystem is the compact API and CLI naming for the ADLS Gen2 file-system resource that contains directories and files. Data Lake Storage Gen2 fundamentals 5 commands Aliases: filesystem, ADLS filesystem, storage fs, Azure storage fs Quick peek Open full term page

Storage premium Data Lake Gen2 endpoint A Data Lake Gen2 endpoint is the DFS endpoint on a storage account used by Azure Data Lake Storage Gen2 APIs, ABFS URIs, and hierarchical namespace operations. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS Gen2 endpoint, DFS endpoint, dfs.core.windows.net endpoint, Data Lake endpoint Quick peek Open full term page

Storage premium Data Lake gold layer The Data Lake gold layer is the business-ready medallion layer where curated, aggregated, and governed data is published for analytics, reporting, and decision support. Medallion lakehouse architecture intermediate 5 commands Aliases: gold layer, gold zone, curated business layer, trusted reporting layer Quick peek Open full term page