Search Azure terms

Identity premium B2B collaboration Microsoft Entra B2B collaboration lets organizations invite external users and business partners to access applications and resources while keeping control of corporate data and access policies. External identities fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Identity premium Entitlement management Entitlement management uses access packages to govern access to groups, applications, SharePoint sites, and other resources for internal and external identities. Identity Governance intermediate 4 commands Aliases: Microsoft Entra entitlement management, Entra entitlement management, access package governance Quick peek Open full term page

Identity premium Guest user A guest user is an external identity invited into a Microsoft Entra tenant so a partner, contractor, or external collaborator can access approved resources. External identities fundamentals 4 commands Aliases: B2B guest user, external guest user, Microsoft Entra guest Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL external table A Synapse SQL external table is database metadata that lets Synapse SQL query files stored outside the database, usually in Azure Storage or ADLS Gen2. It references an external data source, file format, and file location for governed SQL analytics. Synapse Analytics fundamentals 6 commands Aliases: external table in Synapse, Synapse external table, SQL external table, external table over lake files Quick peek Open full term page

Analytics premium External data source An External data source is a database object that defines the location and connection information used by SQL engines to access external data. Teams use it to point serverless SQL, dedicated SQL pools, or PolyBase-style queries to data stored outside the database, such as Azure Storage or Data Lake paths. It is not the external table schema, the file format definition, the storage account itself, or proof that the credential can read every file under the path. Synapse SQL and data virtualization intermediate 6 commands Aliases: CREATE EXTERNAL DATA SOURCE, PolyBase external data source, Synapse external data source Quick peek Open full term page

Analytics premium External file format An External file format is a database object that describes the file type, delimiter, compression, and parsing options used to read or write external data. Teams use it to tell SQL engines how to interpret external files such as delimited text, Parquet, ORC, or compressed data before external tables and CETAS jobs use them. It is not the data source location, the external table schema, the actual lake file, or a guarantee that every file in a folder has the same structure. Synapse SQL and data virtualization intermediate 6 commands Aliases: CREATE EXTERNAL FILE FORMAT, PolyBase file format, Synapse external file format Quick peek Open full term page

Containers premium External ingress External ingress in Azure Container Apps allows traffic from outside the Container Apps environment to reach a container app endpoint. Teams use it to publish a container app to callers outside the environment, including users, APIs, webhooks, partners, or front-end gateways that need a reachable HTTPS or TCP endpoint. It is not internal-only ingress, a custom domain certificate, a network security guarantee, or proof that authentication, authorization, rate limits, and backend health are configured correctly. Azure Container Apps intermediate 6 commands Aliases: external Container Apps ingress, public ingress, internet-facing ingress Quick peek Open full term page

Analytics premium External table An External table is a SQL table definition whose data is stored outside the database, commonly in Azure Storage or Azure Data Lake Storage. Teams use it to let SQL users query lake files or remote data through familiar table names while the actual data remains in external storage. It is not a managed internal database table, a copy of the data, a storage access policy, or proof that the external files are optimized, fresh, or secure. Synapse SQL and data virtualization intermediate 6 commands Aliases: Synapse external table, SQL external table, PolyBase external table Quick peek Open full term page

Analytics premium Serverless SQL external table A serverless SQL external table in Azure Synapse SQL is a metadata object that references files in Azure Storage or Azure Data Lake Storage. Serverless SQL pools use native external tables to read external data, map columns, apply supported file formats, and support CETAS export patterns. Azure Synapse Analytics intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

DevOps premium Service connection Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely. CI/CD fundamentals 6 commands Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection Quick peek Open full term page

Identity premium Service principal A service principal is the local Microsoft Entra identity for an application or automation instance in a tenant. It represents the app for sign-in, consent, and authorization, and it can receive Azure RBAC roles or API permissions without using a human user account. Azure identity fundamentals 6 commands Aliases: Microsoft Entra service principal, Service principal, application service principal, automation identity, service principal, service-principal Quick peek Open full term page

Containers premium Azure Container Registry A managed private registry service for building, storing, and managing container images and OCI artifacts for container deployments. Container images fundamentals 5 commands Aliases: ACR Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL CETAS Synapse SQL CETAS means CREATE EXTERNAL TABLE AS SELECT. It creates external table metadata and exports the result of a T-SQL SELECT statement in parallel to files in Azure Storage or Azure Data Lake Storage Gen2 for later SQL or lake consumption. Synapse Analytics fundamentals 6 commands Aliases: CREATE EXTERNAL TABLE AS SELECT, CETAS, Synapse CETAS, serverless SQL CETAS Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL on-demand Synapse SQL on-demand is the serverless SQL pool model in Azure Synapse Analytics. It lets teams run T-SQL queries over data in the lake without provisioning dedicated warehouse capacity, storing only metadata objects while using external data sources, views, functions, and security objects. Synapse Analytics fundamentals 6 commands Aliases: SQL on-demand, Synapse serverless SQL, serverless SQL in Synapse, built-in serverless SQL pool Quick peek Open full term page

Analytics learning-path-anchor Synapse SQL script A Synapse SQL script is a saved T-SQL authoring artifact in Synapse Studio. Users create or import scripts in the Develop hub, connect them to a dedicated or serverless SQL pool, run queries, review tabular results, export output, and organize scripts into folders. Synapse Analytics fundamentals 5 commands Aliases: SQL script in Synapse, Synapse Studio SQL script, T-SQL script artifact, Synapse query script Quick peek Open full term page

Containers learning-path-anchor Target port A target port tells Azure Container Apps where to deliver traffic inside your container. Public or internal ingress may expose an endpoint, but the app still has to listen on a specific port. If the container listens on 8080 and ingress targets 80, users may see timeouts, failed probes, or gateway errors. The setting is small, but it is often the difference between the app being deployed and the app being reachable. It should match the application startup command, Dockerfile, framework port, and health probes. Azure Container Apps intermediate 5 commands Aliases: container target port, Container Apps target port, ingress targetPort, container ingress port Quick peek Open full term page

Analytics learning-path-anchor Databricks table A governed Databricks data object, commonly managed, external, or foreign, queried through Unity Catalog and optimized for analytics. Databricks fundamentals 4 commands Aliases: Unity Catalog table, Delta table in Databricks, Databricks managed table Quick peek Open full term page

Identity learning-path-anchor System-assigned managed identity A system-assigned managed identity lets one Azure resource authenticate without a stored password, client secret, or certificate managed by your app team. You turn it on for a resource such as a web app, function, virtual machine, data factory, or automation account. Azure creates an identity for that resource, and the resource can request... Managed identities intermediate 4 commands Aliases: system assigned identity, resource managed identity, SystemAssigned identity, managed service identity Quick peek Open full term page

Analytics command-rich Synapse workspace A Synapse workspace is the main container where a team builds and operates Azure Synapse Analytics. It gives the team one named place for SQL pools, Spark pools, pipelines, notebooks, linked services, access rules, monitoring, and the connection to the default data lake. The workspace is not just a folder in the portal; it... Analytics platform fundamentals 9 commands Aliases: Azure Synapse workspace, Synapse Analytics workspace, workspace in Azure Synapse, Synapse analytics boundary Quick peek Open full term page

Databases complete SQL contained database user Microsoft Learn describes contained database users as users that authenticate at the database level rather than through a matching login in the master database. In Azure SQL Database, they can support SQL authentication or Microsoft Entra identities, and the database name must be included in the connection string. Data platform intermediate 6 commands Aliases: contained database user, database-contained user, Azure SQL contained user, CREATE USER FROM EXTERNAL PROVIDER Quick peek Open full term page

Databases complete SQL contained user Microsoft Learn explains that a contained database user is a SQL user not connected to a login in the master database. For Microsoft Entra authentication, administrators create the user in the target database from an external provider, including users, groups, service principals, or managed identities. Azure SQL intermediate 6 commands Aliases: contained user, database user without login, contained SQL user, database-scoped SQL user Quick peek Open full term page

Identity verified Workload identity federation Workload identity federation lets an external workload exchange a trusted token for Microsoft Entra access tokens without storing long-lived secrets. Microsoft Entra validates the issuer, subject, and audience in a federated credential, then allows automation such as GitHub Actions, Kubernetes, or other platforms to access protected resources. Identity operations fundamentals 5 commands Aliases: Federated workload identity, OIDC federation for workloads, Federated identity credential, Secretless workload authentication Quick peek Open full term page

Analytics premium CETAS Create External Table As Select, a pattern for writing query results to external storage. Analytics platform intermediate 8 commands Aliases: Create External Table As Select Quick peek Open full term page

Analytics premium Synapse SQL Synapse SQL is the T-SQL analytics capability in Azure Synapse Analytics. It includes dedicated SQL pools for provisioned warehousing and serverless SQL pools for on-demand lake queries, letting teams analyze structured and semi-structured data through familiar SQL endpoints inside a Synapse workspace. Synapse Analytics intermediate 7 commands Aliases: Synapse SQL engine, Azure Synapse SQL, Synapse serverless and dedicated SQL, SQL analytics in Synapse Quick peek Open full term page

Containers premium Azure Kubernetes Service Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane. Managed Kubernetes advanced 6 commands Aliases: AKS, managed Kubernetes Quick peek Open full term page

Analytics premium Databricks access connector A first-party Azure resource that gives Azure Databricks a managed identity for Unity Catalog storage credentials and other governed service access. Azure Databricks intermediate 6 commands Aliases: Access Connector for Azure Databricks, Azure Databricks access connector, Databricks managed identity connector Quick peek Open full term page

Identity premium Federated credential A Federated credential is a Microsoft Entra trust configuration that allows a workload to exchange a token from an external identity provider for an Entra access token without using a stored secret. Teams use it to let approved external workloads such as pipelines, automation systems, or Kubernetes workloads authenticate to Azure using signed tokens instead of long-lived client secrets. It is not a user password, general RBAC grant, certificate, managed identity by itself, or permission to access Azure resources without matching issuer, subject, audience, and role assignment controls. Workload identity intermediate 6 commands Aliases: workload federated credential, OIDC credential, external identity federation credential, federated trust credential Quick peek Open full term page

Identity premium Federated identity credential A Federated identity credential is a Microsoft Entra credential object that defines the issuer, subject, and audience trusted for workload identity federation. Teams use it to allow a specific external workload identity to authenticate as an Entra application or user-assigned managed identity without storing a client secret or certificate. It is not a role assignment, token issued by Azure, user sign-in method, broad trust for every workflow in a repository, or evidence that the workload can access resources without RBAC. Workload identity intermediate 6 commands Aliases: Microsoft Entra federated identity credential, FIC, workload identity credential, OIDC federation credential Quick peek Open full term page

AI and Machine Learning premium Foundry hub A Foundry hub is a hub-style Microsoft Foundry resource used in selected scenarios to group AI projects with shared security, connections, data access, and governance settings. Teams use it to organize related AI projects that need common connections, managed identities, network controls, storage, security review, and platform governance across teams or application portfolios. It is not a whole Azure tenant, a model deployment by itself, a replacement for project-level permissions, or the required resource shape for every modern Foundry scenario. Microsoft Foundry intermediate 6 commands Aliases: Azure AI Foundry hub, Foundry hub resource, hub-based project, AI hub Quick peek Open full term page

Analytics premium PolyBase PolyBase lets a SQL engine work with files stored outside the database, especially in Azure Storage or Azure Data Lake Storage. In Azure Synapse dedicated SQL pool, teams use it to define external data sources, file formats, and external tables, then load data into warehouse tables with T-SQL. It is useful when data lands in a lake first and the warehouse needs a scalable way to read or ingest it. PolyBase is not a pipeline by itself; it is the SQL-side external data access pattern. Synapse Analytics advanced 6 commands Aliases: polybase, PolyBase Quick peek Open full term page

Storage premium Service SAS A service SAS is a shared access signature that delegates limited access to a specific Azure Storage service resource, such as a blob, queue, table, or file. It is signed with a storage account key and constrains permissions, resource scope, protocol, IP range, and expiry time. Blob Storage fundamentals 6 commands Aliases: Azure Storage service SAS, Service SAS, service sas, service shared access signature, service-sas, storage service SAS Quick peek Open full term page

Containers premium ACR admin user The ACR admin user is the quick username-and-password login for a registry. It can be convenient for tests, but it weakens accountability because it is shared. For production, prefer Entra identities, managed identities, tokens, or scoped access patterns. Azure Container Registry intermediate 5 commands Aliases: ACR Quick peek Open full term page

Web premium App Service restore App Service restore is recovering App Service content and supported configuration from an app backup, usually by overwriting an app or restoring into another app or deployment slot. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes. App Service Recovery intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Azure AI Search index An Azure AI Search index is the place where your application searches. It is not just a pointer to a database or blob container. It is a separate searchable structure with documents, fields, and rules for how text, filters, facets, semantic ranking, and vectors behave. If the index schema is wrong, the search experience feels wrong even when the source data is good. Developers and operators use indexes to make. AI platform and search intermediate 5 commands Aliases: Azure AI Search index, search index, AI Search index, azure-ai-search-index Quick peek Open full term page

Analytics premium Azure Databricks Unity Catalog A unified governance layer in Azure Databricks for data and AI assets, including catalogs, schemas, tables, volumes, models, privileges, and lineage. Data governance intermediate 5 commands Aliases: Unity Catalog Quick peek Open full term page

AI and Machine Learning premium Azure OpenAI managed identity Azure OpenAI managed identity uses Microsoft Entra identities so Azure workloads can call model endpoints without stored keys. Azure OpenAI intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Migration premium Backup vault A Backup vault is an Azure Backup storage and management entity that stores backups, recovery points, and backup policies for supported newer workloads. Backup and recovery fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Containers premium Container Apps ingress The Container Apps setting that controls whether and how HTTP or TCP traffic reaches a container app. Azure Container Apps intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Databases premium Cosmos DB account Design the account boundary for a global application before choosing databases, containers, regions, consistency, and backup mode.; Separate regulated, tenant-specific, or production workloads into dedicated Cosmos DB ac Database intermediate 5 commands Aliases: Cosmos DB account, cosmos db account Quick peek Open full term page

Storage premium Data Lake directory A directory in Azure Data Lake Storage Gen2 is a hierarchical namespace path segment that can contain files and child directories and can have access controls applied. Data Lake Storage Gen2 fundamentals 5 commands Aliases: ADLS directory, Data Lake folder, Gen2 directory, lake folder Quick peek Open full term page

Storage premium Data Lake filesystem Data Lake filesystem is the compact API and CLI naming for the ADLS Gen2 file-system resource that contains directories and files. Data Lake Storage Gen2 fundamentals 5 commands Aliases: filesystem, ADLS filesystem, storage fs, Azure storage fs Quick peek Open full term page

Storage premium Data Lake Gen2 endpoint A Data Lake Gen2 endpoint is the DFS endpoint on a storage account used by Azure Data Lake Storage Gen2 APIs, ABFS URIs, and hierarchical namespace operations. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS Gen2 endpoint, DFS endpoint, dfs.core.windows.net endpoint, Data Lake endpoint Quick peek Open full term page

Storage premium Data Lake gold layer The Data Lake gold layer is the business-ready medallion layer where curated, aggregated, and governed data is published for analytics, reporting, and decision support. Medallion lakehouse architecture intermediate 5 commands Aliases: gold layer, gold zone, curated business layer, trusted reporting layer Quick peek Open full term page

Storage premium Data Lake ingestion zone A Data Lake ingestion zone is the controlled landing area where source data first arrives before validation, transformation, enrichment, or publication. Data Lake Storage Gen2 fundamentals 5 commands Aliases: landing zone, raw ingestion zone, lake landing area, ingest zone Quick peek Open full term page

Storage premium Data Lake namespace A Data Lake namespace is the hierarchical address space in Azure Data Lake Storage Gen2 that organizes file systems, directories, files, and paths for analytics. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS namespace, hierarchical namespace, HNS namespace, lake namespace Quick peek Open full term page

Storage premium Data Lake partition folder A Data Lake partition folder is a directory pattern, often key=value, that groups files by values such as date, region, tenant, or business domain for efficient reads. Data Lake Storage Gen2 intermediate 5 commands Aliases: partition folder, Hive-style partition folder, date partition folder, lake partition path Quick peek Open full term page

Storage premium Data Lake path ACL A Data Lake path ACL is the access control list applied to a file or directory path in Azure Data Lake Storage Gen2 for fine-grained permissions. Data Lake Storage Gen2 intermediate 5 commands Aliases: ADLS path ACL, Data Lake path access control, path access control list, data-lake-path-ac Quick peek Open full term page

Integration premium Event Grid managed identity delivery Event Grid managed identity delivery is the pattern where Event Grid uses a managed identity on a topic, domain, or system topic to authenticate event delivery to supported destinations. In Azure, it shows up when teams want to deliver events to Azure destinations without storing destination keys or embedding secrets in event subscription configuration. Teams use it to review system-assigned or user-assigned identity, Event Grid topic or domain identity settings, destination RBAC role assignments, delivery identity settings, dead-letter identity settings, and monitoring before changing production behavior. Event routing advanced 5 commands Aliases: Event Grid managed identity event delivery, managed identity delivery for Event Grid Quick peek Open full term page

Integration premium Event Grid system topic An Event Grid system topic represents one or more events published by an Azure service for a specific Azure resource or scope. Teams use it to subscribe to events emitted by Azure services such as Storage, Event Hubs, IoT Hub, Key Vault, or Resource Manager. It is not a custom topic where an application publishes its own events or a partner topic from an external provider. In production, confirm the source, subscription, destination, filters, schema, identity, retry behavior, failure handling, monitoring, and owner before treating the route as safe. Event Grid intermediate 5 commands Aliases: Azure Event Grid system topic, system topic Quick peek Open full term page

Networking premium Front Door Azure Front Door is Microsoft’s global edge service for modern web applications. Microsoft Learn describes it as a cloud CDN that provides fast, reliable, and secure access to static and dynamic content through Microsoft’s global edge network worldwide. Application delivery and API edge intermediate 5 commands Aliases: Azure Front Door, AFD, Azure Front Door Standard, Azure Front Door Premium, global edge Quick peek Open full term page