Glossary
Search Azure terms
Open a clear definition, then continue into exam context, architecture, commands, operational examples, common mistakes, and related concepts.
Search all
Commands
Learning guides
Concept graph
Compare
Search-first Azure knowledge base
Term results
Search for a term or click a category. Results render only after you ask for them, so the glossary does not dump every available term on first load. Each result includes Quick peek and Open full term page actions.
Start with a search or a category.
Try managed identity , resource group , az group , private endpoint , or click Databases to load all database-related terms.
Showing 50 of 1,851 matching terms. Narrow the search to reduce the list.
AI and Machine Learning
premium
Foundry Agent
A Foundry Agent is an AI agent built or hosted in Microsoft Foundry Agent Service with instructions, model selection, tools, knowledge, and runtime execution evidence. Teams use it to automate business tasks that require model reasoning, tool calls, enterprise knowledge, workflow steps, retrieval, approvals, and observable runs inside a governed Azure AI platform. It is not a magic autonomous worker, a security principal by itself, a replacement for process controls, or a safe production feature without tool permissions, evaluation, monitoring, and human escalation.
Microsoft Foundry
intermediate
6 commands
Aliases: Microsoft Foundry agent, Foundry Agent Service agent, AI agent in Foundry, agent service agent
Quick peek
Open full term page
AI and Machine Learning
premium
Agent service
Agent service is Microsoft Foundry Agent Service, a managed platform for building, deploying, and scaling AI agents. In everyday Azure work, teams use it to create prompt agents, workflow agents, or hosted code-based agents that use models and tools to perform tasks. The useful evidence is project, agent ID, instructions, model, tool configuration, deployment type,
Microsoft Foundry
intermediate
4 commands
Aliases: Microsoft Foundry Agent Service, Foundry Agent Service, Azure AI agent service
Quick peek
Open full term page
AI and Machine Learning
field-manual-complete
Vector store
A vector store holds searchable file chunks and embeddings for Foundry agents or conversations that use the file search tool.
Microsoft Foundry Agent Service
advanced
4 commands
Aliases: Foundry vector store, file search vector store, agent vector store, document vector store
Quick peek
Open full term page
AI and Machine Learning
premium
Microsoft Foundry
Microsoft Foundry is the Microsoft AI platform experience used to build, evaluate, deploy, and manage AI applications, models, agents, and related project assets. Teams should manage it with clear ownership, monitoring, rollback evidence, and production change discipline.
AI platform
intermediate
4 commands
Aliases: Azure AI Foundry, Foundry, AI Foundry
Quick peek
Open full term page
Storage
premium
Trusted Microsoft services access
Trusted Microsoft services access is an Azure Storage firewall exception that allows selected Azure services to reach a restricted storage account when their service traffic cannot be represented by virtual network or IP rules. The services still authenticate and must be allowed for supported operations.
Azure Storage
intermediate
5 commands
Aliases: trusted Azure services access, AzureServices bypass, allow trusted Microsoft services, storage trusted services access
Quick peek
Open full term page
Storage
premium
Trusted Microsoft services for storage
Trusted Microsoft services for Azure Storage are specific Azure services that Microsoft documents as eligible for storage firewall exceptions. Depending on the service, access may be based on tenant registration, supported operations, or managed identity authorization combined with Azure RBAC or Data Lake ACLs.
Storage platform
intermediate
5 commands
Aliases: trusted Azure services for Storage, storage trusted services list, Azure Storage trusted services, trusted services storage firewall
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry IQ
Foundry IQ is a managed knowledge layer for Microsoft Foundry that connects enterprise data into reusable, permission-aware knowledge bases for AI agents. Teams use it to ground agents in approved enterprise knowledge from Azure, SharePoint, OneLake, the web, and Azure AI Search-backed knowledge bases while preserving permissions and reusable retrieval configuration. It is not a general data lake, a replacement for source-system permissions, a guarantee that retrieved content is correct, or a reason to skip citation, freshness, and access reviews.
Microsoft Foundry
intermediate
6 commands
Aliases: Microsoft Foundry IQ, Foundry IQ knowledge base, managed knowledge layer, permission-aware knowledge base
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry
Create a governed project boundary where AI teams can build agents, evaluations, files, and model deployments without unmanaged sprawl.; Compare, evaluate, and approve model deployments before a generative AI feature is
AI platform
fundamentals
5 commands
Aliases: AI Foundry, Microsoft Foundry, Foundry resource, Foundry project, Azure AI Foundry, azure ai foundry
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry Models
Foundry Models is the Microsoft Foundry model catalog and deployment experience for discovering, evaluating, and using cloud AI models through managed endpoints.
Microsoft Foundry
intermediate
5 commands
Aliases: Microsoft Foundry Models, Foundry model catalog, AI Foundry models, model catalog
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry resource
A Foundry resource is the primary Azure resource for building, deploying, and managing generative AI models, agents, evaluations, and applications.
Microsoft Foundry
intermediate
5 commands
Aliases: Microsoft Foundry resource, Foundry AIServices resource, AI Services Foundry resource
Quick peek
Open full term page
AI and Machine Learning
premium
Agent run
Agent run is one execution of an agent against a thread, during which the agent reads messages, reasons, may call tools, and produces output. In everyday Azure work, teams use it to track what an agent attempted, what tools it used, whether it completed, and why a response was produced. The useful evidence is thread
Microsoft Foundry
intermediate
4 commands
Aliases: Foundry agent run, AI agent run, thread run
Quick peek
Open full term page
AI and Machine Learning
premium
Agent thread
Agent thread is the persistent conversation state that stores messages and context used by an agent during runs. In everyday Azure work, teams use it to keep a multi-turn interaction organized so the agent can understand prior user messages and produce contextual responses. The useful evidence is thread ID, messages, metadata, related run IDs, timestamps,
Microsoft Foundry
intermediate
4 commands
Aliases: Foundry agent thread, AI agent conversation thread, agent conversation context
Quick peek
Open full term page
AI and Machine Learning
premium
Agent tool
Agent tool is a capability an agent can invoke to search, run code, query data, call APIs, or perform a configured action. In everyday Azure work, teams use it to let an agent go beyond text generation by grounding answers or carrying out controlled work. The useful evidence is tool type, configuration, authentication method, allowed
Microsoft Foundry
intermediate
4 commands
Aliases: Foundry agent tool, AI agent tool, agent built-in tool, agent custom tool
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry project
An Azure AI Foundry project is the working area where a team builds and organizes an AI application inside Microsoft Foundry. It keeps related agents, evaluations, files, indexes, tools, connections, and model usage together instead of scattering them across a shared portal. Think of it as the project boundary for one AI product, prototype, or team. It is useful because AI work quickly becomes messy: prompts, test data, model deployments, safety checks, and access decisions all need a home with ownership and repeatable operations.
AI platform
advanced
4 commands
Aliases: AI Foundry project, AI project, Foundry project, Microsoft Foundry project
Quick peek
Open full term page
AI and Machine Learning
field-manual-complete
Language service
Azure Language is a cloud-based Azure AI service for natural language processing. It provides core text analysis capabilities such as language detection, PII detection, named entity recognition, text analytics for health, and other features through Microsoft Foundry, REST APIs, client libraries, containers, and agent tools.
Azure AI services
fundamentals
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Azure OpenAI Service
Azure OpenAI Service provides managed access to OpenAI model capabilities through Azure endpoints and enterprise controls.
Generative AI
fundamentals
11 commands
Aliases: Azure OpenAI
Quick peek
Open full term page
Web
premium
App Service private endpoint
An App Service private endpoint uses Azure Private Link to give an app a private IP address in a virtual network for inbound client access.
App Service Networking
intermediate
6 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry hub
A Foundry hub is a hub-style Microsoft Foundry resource used in selected scenarios to group AI projects with shared security, connections, data access, and governance settings. Teams use it to organize related AI projects that need common connections, managed identities, network controls, storage, security review, and platform governance across teams or application portfolios. It is not a whole Azure tenant, a model deployment by itself, a replacement for project-level permissions, or the required resource shape for every modern Foundry scenario.
Microsoft Foundry
intermediate
6 commands
Aliases: Azure AI Foundry hub, Foundry hub resource, hub-based project, AI hub
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry Local
Foundry Local is an on-device AI runtime and SDK for shipping applications that run curated generative AI models locally on user hardware.
Microsoft Foundry
intermediate
5 commands
Aliases: Microsoft Foundry Local, Foundry Local CLI, on-device AI inference, local AI runtime
Quick peek
Open full term page
AI and Machine Learning
premium
Foundry project
A Foundry project organizes agents, model deployments, evaluations, files, and team access inside a Microsoft Foundry resource for building AI applications.
Microsoft Foundry
intermediate
5 commands
Aliases: Microsoft Foundry project, AI Foundry project, Foundry workspace project
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI Foundry hub
Azure AI Foundry hub is the classic Foundry hub resource used to group AI projects that share common security, data access, connections, and platform settings. In Azure, teams encounter it when teams need hub-based projects for selected Foundry and Azure Machine Learning scenarios such as fine-tuning, shared connections, and custom ML work. The useful question
AI platform
advanced
4 commands
Aliases: AI Hub, Foundry AI Hub, hub-based project, Azure AI hub
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI services
Azure AI services is the family of Azure cloud AI APIs and resources, surfaced through Foundry Tools, for vision, speech, language, translation, content, and generative scenarios.
AI services
fundamentals
4 commands
Aliases: AI services, Azure AI services account, Cognitive Services, Foundry Tools
Quick peek
Open full term page
AI and Machine Learning
premium
Azure AI services account
An Azure resource that provides endpoints, keys, identity, networking, billing, and monitoring for one or more Azure AI service capabilities.
Azure AI services
fundamentals
4 commands
Aliases: AI services account, Azure AI multi-service resource, Foundry resource, Microsoft.CognitiveServices account
Quick peek
Open full term page
AI and Machine Learning
premium
Multi-service AI account
Multi-service AI account means a shared Azure AI services account for applications that need several supported AI capabilities from one governed endpoint boundary. You see it when teams connect language, vision, speech, translation, or content-understanding features to production applications. Think of it as one managed account boundary for several AI capabilities, not one unlimited permission bucket. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path.
Azure AI services
intermediate
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
AI and Machine Learning
premium
Multi-service AI resource
Multi-service AI resource means an Azure AI resource that exposes supported AI service capabilities through one managed resource object. You see it when teams build applications that combine language, vision, speech, translation, or content services without creating a separate resource for every feature. Think of it as one Azure resource boundary for supported AI capabilities, with identity, network, monitoring, and billing attached. It matters because the setting changes how teams design, secure, operate, and troubleshoot the workload. Before changing it in production, know the owner, dependency, evidence, expected result, and rollback path.
Azure AI services
fundamentals
4 commands
Aliases: No aliases yet
Quick peek
Open full term page
Storage
learning-path-anchor
Table service endpoint
A Table service endpoint is the address your application uses when it talks to Azure Table Storage. For a normal Azure Storage account, it looks like an account-specific table URL. That address is not just a string in a connection setting; it determines DNS resolution, firewall evaluation, private endpoint routing, TLS, SDK configuration, and what operators test during an outage. If the endpoint is wrong, the table might exist and credentials might be valid, but clients still fail to connect.
Table Storage
intermediate
5 commands
Aliases: Azure Table endpoint, Table Storage endpoint, storage table endpoint, Table data-plane endpoint
Quick peek
Open full term page
Monitoring and Observability
premium
AI service diagnostic settings
AI service diagnostic settings are Azure Monitor settings on an Azure AI or Foundry Tools resource that route resource logs and platform metrics to destinations such as Log Analytics, Storage, or Event Hubs for investigation and retention.
Azure Monitor
intermediate
3 commands
Aliases: Azure AI diagnostic settings, Foundry Tools diagnostic logging, Cognitive Services diagnostic settings, AI resource logs
Quick peek
Open full term page
AI and Machine Learning
premium
AI service endpoint
An AI service endpoint is the HTTPS base address that applications use to call an Azure AI or Foundry Tools resource. It identifies the resource, region or custom subdomain, and may resolve through public DNS or a private endpoint.
Azure AI services
fundamentals
3 commands
Aliases: Azure AI endpoint, Cognitive Services endpoint, Foundry Tools endpoint, AI resource URL
Quick peek
Open full term page
AI and Machine Learning
premium
AI services account key
An AI services account key is a secret key for a multi-service Azure AI or Microsoft Foundry resource. It can authenticate requests for supported services tied to that resource, making storage, rotation, and access control especially important.
Azure AI services
intermediate
3 commands
Aliases: multi-service account key, Foundry resource key, AIServices account key, Cognitive Services account key
Quick peek
Open full term page
AI and Machine Learning
premium
AI services endpoint
An AI services endpoint is the base URL for a multi-service Azure AI or Microsoft Foundry resource. Applications combine this endpoint with a supported API path and authentication method to call the resource.
Azure AI services
fundamentals
3 commands
Aliases: multi-service endpoint, Foundry resource endpoint, AIServices endpoint, Cognitive Services endpoint
Quick peek
Open full term page
AI and Machine Learning
premium
AI services resource
An AI services resource is the Azure resource, commonly Microsoft.CognitiveServices/accounts with kind AIServices, that provides the governance scope for AI service access, networking, billing, monitoring, keys, endpoints, model deployments, projects, and related configuration.
Azure AI services
fundamentals
3 commands
Aliases: Azure AI services resource, Foundry resource, AIServices resource, Cognitive Services account
Quick peek
Open full term page
Web
field-manual-complete
App Service access restriction
App Service access restriction is the rule list that decides which inbound clients are allowed to reach a web app before the request reaches your code.
App Service networking
intermediate
5 commands
Aliases: access restriction, app service access restriction
Quick peek
Open full term page
Databases
complete
SQL Agent on Managed Instance
Microsoft Learn explains that SQL Server Agent executes SQL Agent jobs for task automation in Azure SQL Managed Instance. A job is a specified series of T-SQL scripts against a database, used to run administrative tasks one or more times and monitor success or failure.
Azure SQL Managed Instance
intermediate
5 commands
Aliases: SQL Agent on Managed Instance, sql agent on managed instance, sql-agent-on-managed-instance
Quick peek
Open full term page
AI and Machine Learning
field-manual-ready
Multi-service account
A multi-service account is one Azure AI services resource that can provide access to multiple supported AI capabilities.
Azure AI services
fundamentals
4 commands
Aliases: Azure AI multi-service resource, Foundry resource, multi-service account, AIServices kind
Quick peek
Open full term page
Containers
premium
Azure Kubernetes Service
Azure Kubernetes Service is Azure’s managed Kubernetes service for deploying, scaling, and operating containerized applications while Azure manages much of the cluster control plane.
Managed Kubernetes
advanced
6 commands
Aliases: AKS, managed Kubernetes
Quick peek
Open full term page
Storage
premium
File service endpoint
A File service endpoint is the Azure Storage endpoint used by clients and services to access Azure Files shares in a storage account through supported protocols and network paths. Teams use it to connect applications, users, file sync agents, and automation to Azure file shares through the correct public endpoint, private endpoint, or virtual network service endpoint path. It is not a file share itself, a private endpoint by itself, a DNS record alone, authorization proof, or a guarantee that SMB, NFS, FileREST, firewall, and identity settings all match.
Azure Files
intermediate
6 commands
Aliases: Azure Files endpoint, storage file endpoint, file endpoint, Azure Storage file service endpoint
Quick peek
Open full term page
Integration
premium
Service Bus
Azure Service Bus is a fully managed enterprise message broker with message queues and publish-subscribe topics. It helps decouple applications and services, load-balance work across competing consumers, route data across boundaries, and coordinate transactional workflows that require reliable messaging, ordering, sessions, duplicate detection, and dead-letter handling.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus, Service Bus Messaging
Quick peek
Open full term page
Integration
premium
Service Bus authorization rule
Service Bus authorization rule is a shared access policy on a namespace, queue, or topic. It names a key pair and grants Listen, Send, or Manage rights, letting applications create SAS tokens or connection strings scoped to the messaging entity they are allowed to use.
Service Bus
fundamentals
6 commands
Aliases: Service Bus SAS policy, Service Bus shared access policy, Service Bus authorization policy, SAS authorization rule
Quick peek
Open full term page
Integration
premium
Service Bus subscription
Service Bus subscription is a named receiver under a Service Bus topic. It behaves like a virtual queue: messages published to the topic are copied into the subscription when its rules match, and receivers read, lock, complete, defer, or dead-letter those subscription messages.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus subscription, topic subscription, Service Bus topic subscription, subscription entity
Quick peek
Open full term page
Integration
premium
Service Bus topic
Service Bus topic is a publish-subscribe entity inside a Service Bus namespace. Publishers send one message to the topic, and matching subscriptions receive their own copies. Topics are used when several downstream systems need the same business event without coupling the publisher to every receiver.
Messaging
fundamentals
6 commands
Aliases: Azure Service Bus topic, Service Bus pub-sub topic, topic entity, broker topic
Quick peek
Open full term page
Web
premium
Service Bus trigger
Service Bus trigger is an Azure Functions binding that starts function execution when a message arrives on a Service Bus queue or topic subscription. It connects the Functions runtime to Service Bus, supports queue, topic, and session scenarios, and uses app settings or identity-based connections for access.
Azure Functions
intermediate
6 commands
Aliases: Azure Functions Service Bus trigger, ServiceBusTrigger, Service Bus queue trigger, Service Bus topic trigger
Quick peek
Open full term page
DevOps
premium
Service connection
Service connection is an Azure DevOps project resource that stores how a pipeline authenticates to Azure or another external service. In Azure Resource Manager connections, it can use workload identity federation, a managed identity, or a service principal so pipeline tasks can deploy safely.
CI/CD
fundamentals
6 commands
Aliases: Azure DevOps service connection, service endpoint, Azure Pipelines service connection, Azure RM service connection
Quick peek
Open full term page
Storage
premium
Service endpoint for Storage
A service endpoint for Storage enables the Microsoft.Storage endpoint on a virtual network subnet and pairs it with storage account network rules. It lets workloads in that subnet reach Azure Storage over the Microsoft backbone while the account firewall allows only approved virtual network sources.
Storage platform
intermediate
6 commands
Aliases: Azure Storage VNet rule, Microsoft.Storage service endpoint, Service endpoint for Storage, Storage service endpoint, service endpoint for storage, service-endpoint-for-storage
Quick peek
Open full term page
Identity
premium
Service principal
A service principal is the local Microsoft Entra identity for an application or automation instance in a tenant. It represents the app for sign-in, consent, and authorization, and it can receive Azure RBAC roles or API permissions without using a human user account.
Azure identity
fundamentals
6 commands
Aliases: Microsoft Entra service principal, Service principal, application service principal, automation identity, service principal, service-principal
Quick peek
Open full term page
Storage
premium
Service SAS
A service SAS is a shared access signature that delegates limited access to a specific Azure Storage service resource, such as a blob, queue, table, or file. It is signed with a storage account key and constrains permissions, resource scope, protocol, IP range, and expiry time.
Blob Storage
fundamentals
6 commands
Aliases: Azure Storage service SAS, Service SAS, service sas, service shared access signature, service-sas, storage service SAS
Quick peek
Open full term page
Web
premium
App Service authentication provider
An identity provider configured in App Service Authentication, such as Microsoft Entra ID, that handles user sign-in for the app. It helps learners understand where the concept appears in Azure operations and what to verify before changing it.
App Service
intermediate
5 commands
Aliases: app service authentication provider, authentication provider
Quick peek
Open full term page
Web
premium
App Service Environment
Microsoft Learn describes App Service Environment as a single-tenant App Service deployment that runs in a customer virtual network. It hosts App Service plans and apps with stronger network isolation, dedicated compute boundaries, and high-scale hosting compared with the public multitenant App Service model.
App Service isolation
intermediate
5 commands
Aliases: ASE, Azure App Service Environment, app service environment
Quick peek
Open full term page
Web
premium
App Service logs
Microsoft Learn explains App Service diagnostic logging as settings that collect application logs, web server logs, detailed errors, failed request traces, container logs, and platform resource logs for App Service apps. These logs can be streamed, stored temporarily, written to storage, or routed through Azure Monitor.
App Service diagnostics
intermediate
5 commands
Aliases: Azure App Service logs, app service logs
Quick peek
Open full term page
Web
premium
App Service Plan
Microsoft Learn describes an App Service plan as the set of compute resources where App Service apps run. The plan defines region, operating system, pricing tier, instance size, scale capacity, and feature availability for one or more hosted apps within the same compute boundary.
App Service hosting plans
intermediate
5 commands
Aliases: Azure App Service plan, serverfarm, App Service hosting plan
Quick peek
Open full term page
Web
premium
App Service restore
App Service restore is recovering App Service content and supported configuration from an app backup, usually by overwriting an app or restoring into another app or deployment slot. Use it to reason about App Service behavior, validate configuration with CLI, and prevent hidden production impact from networking, scaling, recovery, security, or observability changes.
App Service Recovery
intermediate
5 commands
Aliases: No aliases yet
Quick peek
Open full term page
No glossary terms matched that search.
Try a service name, acronym, command group, or category such as RBAC , az group , App Service , Application Insights , Databases , or Azure AI Search .
Clear filters and show matches
Reset search