Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,712 matching terms. Narrow the search to reduce the list.
Analytics
premium
Microsoft Fabric lakehouse
Microsoft Fabric lakehouse is a Microsoft Fabric data item that stores files and tables in OneLake while exposing lakehouse-style analytics and engineering experiences. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Microsoft Fabric
intermediate
4 commands
Aliases: Fabric lakehouse, lakehouse item, OneLake lakehouse
Quick peek
Open full term page
Analytics
premium
Fabric capacity
A Fabric capacity is a dedicated pool of compute resources that powers Microsoft Fabric workloads assigned to workspaces. Teams use it to provide shared compute for Fabric workspaces, reports, lakehouses, warehouses, notebooks, pipelines, and real-time workloads under an assigned capacity SKU. It is not a single workspace, a Power BI report, a storage account, a Databricks cluster, or a guarantee that every tenant workload has unlimited performance. In production, confirm capacity name, SKU, region, admin list, assigned workspaces, workload settings, metrics app evidence, throttling, refresh history, pause state, billing owner, and reservation or scaling plan before treating the design as.
Microsoft Fabric
intermediate
6 commands
Aliases: Microsoft Fabric capacity, Fabric F SKU, Fabric compute capacity
Quick peek
Open full term page
Management and Governance
premium
Microsoft Purview account
Microsoft Purview account is the Azure resource boundary for Microsoft Purview data governance, catalog, scanning, classification, lineage, and policy workflows. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Data governance
intermediate
4 commands
Aliases: Purview account, Microsoft Purview governance account, Azure Purview account
Quick peek
Open full term page
Analytics
premium
Azure Databricks
A unified, open analytics platform on Azure for building, deploying, sharing, and maintaining enterprise data, analytics, and AI solutions at scale.
Data engineering and AI
intermediate
5 commands
Aliases: Databricks on Azure
Quick peek
Open full term page
Databases
premium
Cosmos DB analytical store
A database capability or setting in Azure Cosmos DB that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context.
Azure Cosmos DB
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
verified
OneLake shortcut
OneLake shortcuts are Fabric objects that appear as folders in OneLake while pointing to internal or external storage locations. They let lakehouses, KQL databases, Spark, SQL, and other engines read existing data through a unified namespace without copying the target data.
Microsoft Fabric OneLake
intermediate
5 commands
Aliases: Fabric shortcut, OneLake pointer, shortcut path, target path, OneLake shortcut, OneLake shortcuts, lakehouse shortcut
Quick peek
Open full term page
Databases
field-manual-complete
Synapse Link for Cosmos DB
Synapse Link for Cosmos DB is the legacy Azure integration that exposes Cosmos DB analytical store to Synapse for near-real-time analytics without custom ETL. Microsoft now directs new projects toward Cosmos DB Mirroring in Microsoft Fabric, so existing deployments need careful governance and migration planning.
Azure Cosmos DB
advanced
5 commands
Aliases: Azure Synapse Link for Azure Cosmos DB, Cosmos DB Synapse Link, Cosmos DB analytical store link, Synapse Link analytical store, HTAP for Cosmos DB
Quick peek
Open full term page
Analytics
field-manual-complete
Kusto Query Language
Kusto Query Language, or KQL, is the query language used across Azure Data Explorer, Microsoft Fabric, Azure Monitor, and Microsoft Sentinel to explore structured, semi-structured, and text data, filter records, summarize results, detect patterns, and build operational analytics and dashboards.
Resource Graph
fundamentals
4 commands
Aliases: KQL
Quick peek
Open full term page
Analytics
field-manual-complete
Lakehouse architecture
Lakehouse architecture combines data lake scale with warehouse-style querying, governance, and analytics patterns. On Azure, it commonly uses Delta Lake, OneLake or ADLS storage, Spark, SQL experiences, BI tools, and layered data design such as bronze, silver, and gold at enterprise scale.
Azure Databricks
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
premium field-manual
Materialized view
A materialized view is a stored, continuously maintained result of a query that precomputes data for faster analytics access. Teams use it when teams repeatedly query the same summarized or transformed data and need lower query cost or latency. In plain English, it gives operators a named control for faster analytics, lower repeated query work, and clearer ownership of precomputed results instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear.
Azure Data Explorer and Kusto
intermediate
4 commands
Aliases: Materialized view, ADX materialized view, Kusto materialized view, precomputed view, read model, materialized query result, precomputed analytical view, Azure Data Explorer and Kusto
Quick peek
Open full term page
Analytics
premium field-manual
Medallion architecture
Medallion architecture is a lakehouse data design that organizes data into bronze, silver, and gold layers as quality improves. Teams use it when data teams need a shared pattern for raw ingestion, cleaned data, curated analytics, and trusted consumption. In plain English, it gives operators a named control for clear data quality stages, ownership boundaries, and reusable analytics products instead of leaving the decision hidden in a portal setting, script, or deployment file. Treat it as production-ready only when the owner, dependencies, permission boundary, monitoring signal, and rollback evidence are clear.
Lakehouse architecture
intermediate
4 commands
Aliases: Medallion architecture, bronze silver gold architecture, medallion lakehouse, bronze silver gold layers, lakehouse medallion pattern, bronze-silver-gold, bronze-silver-gold pattern, Azure Databricks, Microsoft Fabric, and lakehouse platforms, Lakehouse architecture
Quick peek
Open full term page
Databases
premium
Azure SQL Microsoft Entra authentication
A database capability or setting in Azure SQL Database that helps teams store, query, scale, secure, and recover application data with clearer ownership, safety, and operational context.
Azure SQL Database
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
premium
Trusted Microsoft services access
Trusted Microsoft services access is an Azure Storage firewall exception that allows selected Azure services to reach a restricted storage account when their service traffic cannot be represented by virtual network or IP rules. The services still authenticate and must be allowed for supported operations.
Azure Storage
intermediate
5 commands
Aliases: trusted Azure services access, AzureServices bypass, allow trusted Microsoft services, storage trusted services access
Quick peek
Open full term page
Storage
premium
Trusted Microsoft services for storage
Trusted Microsoft services for Azure Storage are specific Azure services that Microsoft documents as eligible for storage firewall exceptions. Depending on the service, access may be based on tenant registration, supported operations, or managed identity authorization combined with Azure RBAC or Data Lake ACLs.
Storage platform
intermediate
5 commands
Aliases: trusted Azure services for Storage, storage trusted services list, Azure Storage trusted services, trusted services storage firewall
Quick peek
Open full term page
Identity
premium
Microsoft 365 group
Microsoft 365 group is a collaboration-backed group object in Microsoft Entra ID used for shared membership across Microsoft 365 resources and some Azure access patterns. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Microsoft Entra ID
fundamentals
4 commands
Aliases: M365 group, Office 365 group, Microsoft 365 collaboration group
Quick peek
Open full term page
Databases
premium
Microsoft Entra admin for SQL
Microsoft Entra admin for SQL is the Microsoft Entra identity designated to administer an Azure SQL logical server or SQL Managed Instance through Entra authentication. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Azure SQL identity
intermediate
4 commands
Aliases: Azure SQL Entra admin, Azure AD admin for SQL, SQL Entra administrator
Quick peek
Open full term page
Databases
premium
Microsoft Entra authentication for SQL
Microsoft Entra authentication for SQL is the use of Microsoft Entra identities to authenticate to Azure SQL Database, SQL Managed Instance, or related SQL resources. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Azure SQL identity
intermediate
4 commands
Aliases: Azure SQL Entra authentication, Azure AD authentication for SQL, SQL Entra auth
Quick peek
Open full term page
Identity
premium
Microsoft Entra group
Entra group means a Microsoft Entra ID group object used to manage membership, access assignments, application permissions, and governance workflows as a unit. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Directory groups
intermediate
4 commands
Aliases: Entra group, Azure AD group, directory group
Quick peek
Open full term page
Identity
premium
Microsoft Entra ID
Microsoft Entra ID is the cloud identity platform that stores tenant identities and provides authentication, authorization, application registration, and access governance for Azure. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Identity platform
fundamentals
4 commands
Aliases: Entra ID, Azure Active Directory, Azure AD, AAD
Quick peek
Open full term page
AI and Machine Learning
premium
Microsoft Foundry
Microsoft Foundry is the Microsoft AI platform experience used to build, evaluate, deploy, and manage AI applications, models, agents, and related project assets. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
AI platform
intermediate
4 commands
Aliases: Azure AI Foundry, Foundry, AI Foundry
Quick peek
Open full term page
Storage
premium
Microsoft-managed key for storage
Microsoft-managed key for Storage means the default Azure Storage encryption approach where Microsoft manages the keys that protect stored data at rest. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
Storage encryption
advanced
4 commands
Aliases: platform-managed key for storage, PMK for storage, Microsoft managed storage encryption key
Quick peek
Open full term page
Databases
complete
SQL Microsoft Entra authentication
Microsoft Learn describes Microsoft Entra authentication for Azure SQL as using identities from Microsoft Entra ID to authenticate to Azure SQL Database, Azure SQL Managed Instance, Synapse SQL, and related SQL platforms. It supports users, groups, applications, and managed identities while database permissions still control authorization.
Azure SQL security and identity
intermediate
5 commands
Aliases: Azure SQL Entra authentication, Microsoft Entra authentication for Azure SQL, Azure AD authentication for SQL, Entra ID SQL authentication
Quick peek
Open full term page
Security
top-250-pre130-priority-upgraded
Microsoft Sentinel
Microsoft Sentinel means Microsoft cloud SIEM and SOAR service for collecting security signals, detecting threats, investigating incidents, and automating response. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
SIEM and SOAR
fundamentals
4 commands
Aliases: Sentinel, Azure Sentinel, Microsoft Sentinel SIEM
Quick peek
Open full term page
Databases
learning-path-anchor
Table
A table is the basic place where structured data lives in a database. Each row is one record, and each column describes one attribute, such as customer ID, order date, amount, or status. In Azure, tables show up in Azure SQL Database, SQL Managed Instance, Synapse dedicated SQL pools, Fabric warehouses, PostgreSQL, MySQL, and...
Database
intermediate
4 commands
Aliases: database table, SQL table, relational table, data table
Quick peek
Open full term page
Storage
learning-path-anchor
Data Lake storage account
A storage feature or access model in Data Lake Storage Gen2 that helps teams store, protect, move, and govern application or analytics data with clearer ownership, safety, and operational context.
Data Lake Storage Gen2
advanced
19 commands
Aliases: No aliases yet
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Spark pool
A Synapse Spark pool is the workspace compute definition Azure Synapse uses to start Apache Spark sessions. It records node size, node count, autoscale behavior, runtime version, packages, and idle timeout so notebooks, Spark jobs, and pipelines get repeatable distributed processing.
Synapse Analytics
fundamentals
8 commands
Aliases: Apache Spark pool, Spark pool, Synapse Apache Spark pool, serverless Spark pool
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace managed identity
A Synapse workspace managed identity is the workspace's own identity in Microsoft Entra ID. Instead of saving passwords, keys, or connection strings inside pipelines and notebooks, Synapse can use this identity to ask for tokens and reach trusted Azure resources. It is commonly used for Data Lake Storage, Key Vault, SQL, and linked service...
Synapse Analytics
intermediate
8 commands
Aliases: Synapse managed service identity, Synapse MSI, workspace system-assigned identity, Synapse workspace identity
Quick peek
Open full term page
Storage
premium
Data Lake analytics workload
A production analytics workload that stores, transforms, governs, and serves large data sets from a data lake using Azure services such as ADLS Gen2, Data Factory, Databricks, Synapse, or Fabric.
Data Lake Storage
Intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
Migration
premium
Azure Site Recovery
Azure Site Recovery helps provide disaster recovery by managing replication, failover, and failback for supported workloads.
Disaster recovery
fundamentals
5 commands
Aliases: ASR, Azure Site Recovery, Azure disaster recovery, Site Recovery
Quick peek
Open full term page
Analytics
premium
Ingestion mapping
Ingestion mapping controls how streaming or batch data lands in the correct Kusto columns without corrupting schema, losing values, or forcing manual parsing later. Teams see it in azure data explorer tables, kusto databases. It is not a query projection, update policy, table schema alone, Data Factory mapping data flow, or index projection; confusing them can create null columns, failed ingestion. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Azure Data Explorer
Intermediate
5 commands
Aliases: Kusto ingestion mapping, ADX ingestion mapping, table ingestion mapping, JSON ingestion mapping, CSV ingestion mapping
Quick peek
Open full term page
Monitoring and Observability
premium
KQL
KQL controls how operators search telemetry, detect incidents, investigate performance, build dashboards, create alerts, and summarize operational evidence across Azure services. Teams see it in log analytics workspaces, azure monitor logs. It is not SQL, PromQL, OData filters, ARM template expressions, Azure Data Factory expression language, or application code; confusing them can create missed incidents, expensive queries. Use the term when reviewing access, monitoring, cost, recovery, or performance. It keeps architects, operators, security reviewers, and support teams focused on the same setting, resource, or behavior.
Query language
Fundamentals
5 commands
Aliases: Kusto Query Language, Kusto query, Azure Monitor query language, Sentinel query language
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL CETAS
Synapse SQL CETAS means CREATE EXTERNAL TABLE AS SELECT. It creates external table metadata and exports the result of a T-SQL SELECT statement in parallel to files in Azure Storage or Azure Data Lake Storage Gen2 for later SQL or lake consumption.
Synapse Analytics
fundamentals
6 commands
Aliases: CREATE EXTERNAL TABLE AS SELECT, CETAS, Synapse CETAS, serverless SQL CETAS
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL external table
A Synapse SQL external table is database metadata that lets Synapse SQL query files stored outside the database, usually in Azure Storage or ADLS Gen2. It references an external data source, file format, and file location for governed SQL analytics.
Synapse Analytics
fundamentals
6 commands
Aliases: external table in Synapse, Synapse external table, SQL external table, external table over lake files
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL on-demand
Synapse SQL on-demand is the serverless SQL pool model in Azure Synapse Analytics. It lets teams run T-SQL queries over data in the lake without provisioning dedicated warehouse capacity, storing only metadata objects while using external data sources, views, functions, and security objects.
Synapse Analytics
fundamentals
6 commands
Aliases: SQL on-demand, Synapse serverless SQL, serverless SQL in Synapse, built-in serverless SQL pool
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse Studio
Synapse Studio is the browser-based workspace experience for Azure Synapse Analytics. It exposes hubs for data, development, integration, monitoring, and management, letting users author notebooks and SQL scripts, build pipelines, configure connections, review access, and work with Git-backed or live artifacts.
Synapse Analytics
fundamentals
6 commands
Aliases: Azure Synapse Studio, Synapse web workspace, Synapse workspace UI, Synapse authoring experience
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace firewall
A Synapse workspace firewall is the IP allowlist around a Synapse workspace when it accepts public network traffic. It decides which client IPv4 ranges can attempt to connect before identity permissions are evaluated. It does not grant access by itself; a user or service still needs the right Azure, Synapse, or SQL permissions. It...
Synapse Analytics
intermediate
6 commands
Aliases: Synapse IP firewall rule, workspace firewall rule, Synapse workspace IP allowlist, Synapse public endpoint firewall
Quick peek
Open full term page
Storage
learning-path-anchor
Sync group
A sync group is the container that tells Azure File Sync which cloud file share and which Windows Server folders should stay synchronized. Think of it as one file namespace with a hub in Azure and one or more on-premises or edge locations attached to it. If two groups represent different shares or business...
Files, queues, and tables
fundamentals
6 commands
Aliases: Azure File Sync group, file sync group, sync topology, storage sync group
Quick peek
Open full term page
Databases
premium
Cosmos DB query
Find the high-RU query that causes 429 throttling before increasing provisioned throughput or autoscale limits.; Decide whether a user-facing search should remain a Cosmos DB query, become a point-read pattern, or move t
Azure Cosmos DB
intermediate
4 commands
Aliases: Cosmos DB query, cosmos db query
Quick peek
Open full term page
Storage
premium
Filesystem in Data Lake Storage
Filesystem in Data Lake Storage is the top-level container-like namespace in Azure Data Lake Storage Gen2 that holds directories and files in Azure.
Data Lake Storage Gen2
intermediate
4 commands
Aliases: Filesystem in Data Lake Storage, filesystem in data lake storage
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse SQL script
A Synapse SQL script is a saved T-SQL authoring artifact in Synapse Studio. Users create or import scripts in the Develop hub, connect them to a dedicated or serverless SQL pool, run queries, review tabular results, export output, and organize scripts into folders.
Synapse Analytics
fundamentals
5 commands
Aliases: SQL script in Synapse, Synapse Studio SQL script, T-SQL script artifact, Synapse query script
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workload group
A Synapse workload group is a dedicated SQL pool workload management object that reserves, caps, and grants resources for classified requests. It uses settings such as MIN_PERCENTAGE_RESOURCE, CAP_PERCENTAGE_RESOURCE, and request resource grant percentages to shape isolation, containment, concurrency, and execution behavior.
Synapse Analytics
fundamentals
5 commands
Aliases: workload group in Synapse, dedicated SQL pool workload group, CREATE WORKLOAD GROUP, Synapse workload isolation group
Quick peek
Open full term page
Analytics
learning-path-anchor
Synapse workspace repository
A Synapse workspace repository is where a Synapse workspace saves its authoring artifacts when Git integration is enabled. Instead of every notebook, pipeline, SQL script, linked service, or dataset living only in the live workspace, the team works through branches, commits, pull requests, and a publish branch. That gives data engineers a familiar code-review...
Synapse Analytics
fundamentals
5 commands
Aliases: Synapse Git repository, Synapse source control, Synapse code repository, workspace Git integration
Quick peek
Open full term page
AI and Machine Learning
learning-path-anchor
Synonym map
A synonym map helps Azure AI Search understand that different words can mean the same thing for search. Users may type laptop, notebook, ultrabook, or a product nickname, while the indexed document uses only one of those terms. The synonym map teaches the search service to expand or rewrite the query so relevant documents...
Azure AI Search
intermediate
5 commands
Aliases: AI Search synonym map, search synonyms, synonymMaps, equivalent terms map
Quick peek
Open full term page
Databases
learning-path-anchor
Synthetic partition key
A synthetic partition key is a partition key value you create because no single natural field distributes Cosmos DB data well enough. For example, tenantId alone may create one huge tenant partition, while date alone may concentrate today's traffic. A synthetic key might combine tenant, region, and date bucket into one stored value that...
Cosmos DB
intermediate
5 commands
Aliases: generated partition key, composite partition key value, calculated partition key, synthetic key
Quick peek
Open full term page
AI and Machine Learning
learning-path-anchor
System message
A system message is the instruction layer that tells an Azure OpenAI chat model how it should behave before it answers the user's request. It can define the assistant's role, tone, allowed sources, formatting rules, safety boundaries, and refusal behavior. It is stronger than an ordinary user message, but it is not magic and...
Azure OpenAI
fundamentals
5 commands
Aliases: system prompt, metaprompt, developer instruction, assistant instruction
Quick peek
Open full term page
Storage
learning-path-anchor
Table service endpoint
A Table service endpoint is the address your application uses when it talks to Azure Table Storage. For a normal Azure Storage account, it looks like an account-specific table URL. That address is not just a string in a connection setting; it determines DNS resolution, firewall evaluation, private endpoint routing, TLS, SDK configuration, and what operators test during an outage. If the endpoint is wrong, the table might exist and credentials might be valid, but clients still fail to connect.
Table Storage
intermediate
5 commands
Aliases: Azure Table endpoint, Table Storage endpoint, storage table endpoint, Table data-plane endpoint
Quick peek
Open full term page
Storage
learning-path-anchor
Table Storage
Table Storage is Azure Storage for simple structured NoSQL records. You create tables, store entities, and identify each entity with a PartitionKey and RowKey. It is useful when the data is large, sparse, inexpensive to keep, and usually accessed by known keys. It is not a relational database, search engine, or analytics warehouse. The best fit is operational data that can be denormalized, read directly, updated independently, and kept cheap without requiring joins, stored procedures, or secondary indexes.
Table Storage
fundamentals
5 commands
Aliases: Azure Table Storage, Storage Tables, Azure Storage Tables, Azure Tables storage
Quick peek
Open full term page
Governance
learning-path-anchor
Tag inheritance
Tag inheritance is the controlled reuse of tags from a higher Azure or billing scope. Cost Management can apply higher-scope tags to usage records for reporting, while Azure Policy can copy selected parent tag values onto resources for governance at scale.
Resource tagging
fundamentals
5 commands
Aliases: inherited tags, Azure tag inheritance, billing tag inheritance, policy tag inheritance
Quick peek
Open full term page
Governance
learning-path-anchor
Tag name
A tag name is the label key in an Azure tag. In Environment=Prod, Environment is the tag name and Prod is the value. The name tells people and tools what question the tag answers: who owns this, what cost center pays for it, what environment is it, or what application does it support? Good tag names are short, consistent, boring, and governed. Bad tag names create duplicate categories like CostCenter, cost-center, CostCentre, and BillingCode that fracture reports.
Resource tagging
fundamentals
5 commands
Aliases: tag key, Azure tag key, resource tag name, metadata tag name
Quick peek
Open full term page
Management and Governance
learning-path-anchor
Tag value
A tag value is the answer attached to a tag name. If the tag name is Environment, the value might be Production, Test, or Sandbox. If the name is CostCenter, the value might be a finance code. Values are where governance becomes meaningful, because they separate one owner, workload, data class, or lifecycle state from another. A good value is standardized, approved, and easy to query. A bad value is free-text chaos: prod, production, PROD, live, and critical all trying to mean the same thing.
Tags and naming
fundamentals
5 commands
Aliases: tag values, Azure tag value, resource tag value, tag metadata value
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search