Manage Azure identities and governance
- Create and manage users and groups
- Manage licenses, external users, and self-service password reset settings
- Manage built-in roles and assign permissions at different scopes
- Implement and manage Azure Policy, resource locks, and tags
- Manage resource groups, subscriptions, management groups, and costs
Implement and manage storage
- Configure storage firewalls, virtual networks, and access controls
- Create and manage storage accounts with redundancy and encryption settings
- Manage access keys, stored access policies, and shared access signatures
- Create Azure Files and blob storage resources and configure storage tiers
- Configure soft delete, snapshots, lifecycle management, and versioning
Deploy and manage Azure compute resources
- Deploy resources by using Azure Resource Manager templates or Bicep files
- Create, configure, move, and manage virtual machines, sizes, and disks
- Deploy virtual machines in availability zones and availability sets
- Create container registry resources, provision containers, and manage scaling
- Create App Service resources and configure certificates, backups, networking, and deployment slots
Implement and manage virtual networking
- Create and configure virtual networks, subnets, and virtual network peering
- Configure public IP addresses and user-defined routes
- Troubleshoot network connectivity issues
- Create network security groups and application security groups and evaluate effective rules
- Configure service endpoints, private endpoints, Azure DNS, and load balancing
Monitor and maintain Azure resources
- Interpret metrics, configure logs, and analyze data in Azure Monitor
- Set up alert rules, action groups, and alert processing rules
- Monitor virtual machines, storage accounts, and networks by using monitoring tools
- Use Azure Network Watcher and Connection Monitor for performance and connectivity
- Perform backup, restore, site recovery, and backup reporting activities
