Azure Active Directory documentation

Use Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra, to manage user identities and control access to your apps, data, and resources.

Manage user identities


Learn basic Azure Active Directory (Azure AD) concepts and processes.

Enterprise users

Create Azure AD tenants, manage user accounts, roles, and groups, and assign app access.


Manage admin permissions and apply the principle of least privilege using Azure AD role-based access control.

Customers (B2C)

Manage customer identity and access management (CIAM) for your app.

Cloud sync

Create and manage user identities in Azure AD using Azure AD Connect cloud sync.

Hybrid identity

Create a user identity that can access both on-premises and cloud resources by using Azure AD Connect.

Control access

Conditional Access

Control access to resources by enforcing policies based on user, location, device, and more.


Configure sign-in methods and security features like self-service password reset, MFA, and more.

Device identity

Register and join devices to Azure AD for device management and Conditional Access.

Apps, data, and resources

Managed identities

Create an application identity that can connect to resources using Azure AD authentication.

Domain services

Move legacy apps to managed domains in the cloud while preserving user accounts, groups, and access.

Monitor and audit

Identity governance

Protect, monitor, and audit access to critical assets throughout the identity and access lifecycles.

Reports and monitoring

Use logs and reports to determine usage of your apps and services, detect risks, and troubleshoot issues.