Manage access for Azure Stack Hub

Solution Architect
Azure Stack
Azure Stack Hub

You configure Azure Stack Hub to support users from multiple Azure Active Directory (Azure AD) tenants. This module helps you prepare for Exam AZ-600: Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub.

Learning objectives

  • Describe Hybrid Identity for Azure Stack Hub.
  • Identify an appropriate method for access (service principal, users, groups) for Azure Stack Hub.
  • Explain authentication and authorization for Azure Stack Hub.
  • Provision a service principal for Azure Stack Hub
  • Create a service principal that uses a certificate credential for Azure Stack Hub.
  • Create a service principal that uses client secret credentials for Azure Stack Hub.
  • Recommend a permission model for Azure Stack Hub.
  • Set access permissions using role-based access control for Azure Stack Hub.
  • Add a new Azure Stack Hub user account in AAD for Azure Stack Hub.
  • Create an Azure custom role using Azure PowerShell for Azure Stack Hub.


  • Working experience creating, assigning, and securing corporate identities.
  • Conceptual knowledge of identity assignment solutions, role-based access control, and identity protection methods.