{"id":1213,"date":"2026-10-12T10:10:32","date_gmt":"2026-10-12T10:10:32","guid":{"rendered":"https:\/\/www.devopsschool.com\/tutorials\/?p=1213"},"modified":"2026-10-12T10:10:34","modified_gmt":"2026-10-12T10:10:34","slug":"azure-how-to-create-an-azure-user-assign-permissions-and-log-in","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/tutorials\/azure-how-to-create-an-azure-user-assign-permissions-and-log-in\/","title":{"rendered":"Azure: How to Create an Azure User, Assign Permissions, and Log In"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Objective<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Create a new user in Microsoft Azure, grant access to cloud resources, and verify that the user can log in independently without sharing your administrator credentials.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Prerequisites<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>An active Azure subscription.<\/li>\n\n\n\n<li>Access to the Azure Portal.<\/li>\n\n\n\n<li>Permission to create users in Microsoft Entra ID.<\/li>\n\n\n\n<li>Permission to assign Azure RBAC roles.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Step 1: Log in to Azure Portal<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open <a href=\"https:\/\/portal.azure.com\/\">https:\/\/portal.azure.com\/<\/a><\/li>\n\n\n\n<li>Sign in with your existing administrator account.<\/li>\n\n\n\n<li>Confirm that you are in the correct Microsoft Entra tenant and Azure subscription.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Step 2: Create a new Azure user<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><img decoding=\"async\" src=\"https:\/\/images.openai.com\/static-rsc-4\/JRu_kBffDSN0uPnhicICx23SzNyozL6E9CDvDxnOB_9XhGFTy7CxWRbK0omM4dugugW5p7ioEDoumCVnVLgTIoYfmNpCyBVh7BoqNUZHwSdJUqo5CtUROSO0rA4rAU6Eot1WSCsQA2pJDR1LCEwTTU2OkHqU_Ke2LVbzoPj9Ung?purpose=inline\" alt=\"Part 3: Creating Azure Active Directory (Users, Groups, and Access Management) | by Duyet Bui | Medium\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/medium.com\/%40phd8\/part-3-creating-azure-active-directory-927bc6289546\">medium.com<\/a><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open <a href=\"https:\/\/entra.microsoft.com\/\">https:\/\/entra.microsoft.com\/<\/a><\/li>\n\n\n\n<li>Navigate to Entra ID \u2192 Users.<\/li>\n\n\n\n<li>Click New user \u2192 Create new user. Do not choose Invite external user.<\/li>\n\n\n\n<li>Enter the following details:\n<ul class=\"wp-block-list\">\n<li>User principal name: <code>lab<\/code><\/li>\n\n\n\n<li>Domain: Select your tenant domain, such as <code>yourtenant.onmicrosoft.com<\/code>.<\/li>\n\n\n\n<li>Display name: <code>Azure Lab User<\/code><\/li>\n\n\n\n<li>Password: Set an initial password or use the generated password.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Click Create.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The user is now created inside your Microsoft Entra tenant. Record the full username and initial password securely.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 3: Open your Azure subscription<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><img decoding=\"async\" src=\"https:\/\/images.openai.com\/static-rsc-4\/DoFDEQ3Hso30fOmLmqE9rtbcLcXy9omrHZvkgCAh-7N9mumrG3ZrCl3tAwzMeD5dYvE7kzOWW-XUgIqulHfzvlTlSU111CbHU5OdKAKbRTgi_Q24YzUTM-OlKfrPxS_OP7gwqQK_HUe9xJtHvPzVJWpi8aQudDHXM78yiDpfMLw?purpose=inline\" alt=\"Partner earned credit troubleshooting guide - Partner Center | Microsoft Learn\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/partner-center\/billing\/partner-earned-credit-troubleshoot\">learn.microsoft.com<\/a><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Return to <a href=\"https:\/\/portal.azure.com\/\">https:\/\/portal.azure.com\/<\/a>.<\/li>\n\n\n\n<li>Search for Subscriptions.<\/li>\n\n\n\n<li>Select the subscription you want to share.<\/li>\n\n\n\n<li>Open Access control (IAM).<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If you cannot see any subscriptions, verify that you are using the correct tenant and account.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 4: Assign permissions to the new user<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In Access control (IAM), click Add \u2192 Add role assignment.<\/li>\n\n\n\n<li>Under Job function roles, search for the required role.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>Role<\/th><th>Access provided<\/th><\/tr><tr><td>Reader<\/td><td>View resources only<\/td><\/tr><tr><td>Contributor<\/td><td>Manage Azure resources, but cannot grant other users access<\/td><\/tr><tr><td>Owner<\/td><td>Manage resources and grant access to others<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ol start=\"3\" class=\"wp-block-list\">\n<li>Select Contributor for normal cloud resource management, or Owner if full resource and access administration is required.<\/li>\n\n\n\n<li>Click Next.<\/li>\n\n\n\n<li>Under Members, click Select members.<\/li>\n\n\n\n<li>Search for <code>lab<\/code> or the full username.<\/li>\n\n\n\n<li>Select the user and click Review + assign.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If Contributor and Owner are missing<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Confirm that you are on the subscription&#8217;s Access control (IAM) page, with Job function roles selected. If the roles remain unavailable, check your own access permissions and any subscription restrictions. You may need an administrator with role-assignment permissions to complete this step.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 5: Verify the role assignment<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Return to Access control (IAM).<\/li>\n\n\n\n<li>Open Role assignments.<\/li>\n\n\n\n<li>Search for the new user.<\/li>\n\n\n\n<li>Verify the assigned role and scope.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The role should appear at the subscription level if you assigned it there. A role assigned only to a resource group grants access only within that scope.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 6: Log in as the new user<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><img decoding=\"async\" src=\"https:\/\/images.openai.com\/static-rsc-4\/m2l8XFdzMtgOZT0Iwrmn585DYASvNWfMjXBfiPk-9T25go-7fnIMpgMKciJwm4nhvpjHfeaJr76yT6iIpTB_brpZ_ZFwDyhsYVEOlyPwmJWETFcNiNm0pZ2ZGKlaCUjV89_FI5gUNiSiFRE6pXbSisnTe8NB1Yw72ejPO5131D8?purpose=inline\" alt=\"First Steps with DocumentDB | Azure Cosmos DB and DocumentDB Succinctly\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.syncfusion.com\/succinctly-free-ebooks\/azure-cosmos-db-and-documentdb-succinctly\/first-steps-with-documentdb\">syncfusion.com<\/a><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open a private\/incognito browser window.<\/li>\n\n\n\n<li>Go to <a href=\"https:\/\/portal.azure.com\/\">https:\/\/portal.azure.com\/<\/a>.<\/li>\n\n\n\n<li>Enter the new user&#8217;s full username, for example <code>lab@yourtenant.onmicrosoft.com<\/code>.<\/li>\n\n\n\n<li>Enter the initial password.<\/li>\n\n\n\n<li>Change the password if prompted and complete any required authentication steps.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Use the actual username shown on the new user&#8217;s Overview page. The example domain above is only illustrative.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 7: Test access<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">After signing in as <code>lab<\/code>:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Search for Subscriptions.<\/li>\n\n\n\n<li>Open the assigned subscription.<\/li>\n\n\n\n<li>Navigate to a resource such as a virtual machine or storage account.<\/li>\n\n\n\n<li>Confirm that the user can perform actions permitted by the assigned role.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If the subscription is missing, verify the selected directory from the account menu and confirm that the role assignment succeeded.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Step 8: Security best practices<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Never share your own administrator password.<\/li>\n\n\n\n<li>Give the new user only the permissions they need.<\/li>\n\n\n\n<li>Enable multifactor authentication where appropriate.<\/li>\n\n\n\n<li>Store initial passwords securely and require a password change.<\/li>\n\n\n\n<li>Use the Owner role sparingly.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Final checklist<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Setup progress<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"882\" height=\"349\" src=\"https:\/\/www.devopsschool.com\/tutorials\/wp-content\/uploads\/2026\/10\/image.png\" alt=\"\" class=\"wp-image-1214\" srcset=\"https:\/\/www.devopsschool.com\/tutorials\/wp-content\/uploads\/2026\/10\/image.png 882w, https:\/\/www.devopsschool.com\/tutorials\/wp-content\/uploads\/2026\/10\/image-766x303.png 766w, https:\/\/www.devopsschool.com\/tutorials\/wp-content\/uploads\/2026\/10\/image-300x119.png 300w\" sizes=\"auto, (max-width: 882px) 100vw, 882px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Created the user in Microsoft Entra IDRecorded the user&#8217;s full login nameAssigned an Azure RBAC role at the correct scopeVerified the role assignmentLogged in using a separate browser sessionConfirmed the user can access the intended resources<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Expected result: The new user can sign in independently to the Azure Portal and manage only the resources permitted by the assigned role.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Official references: <a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/fundamentals\/how-to-create-delete-users\">Create users in Microsoft Entra ID<\/a> \u00b7 <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/role-based-access-control\/role-assignments-portal\">Assign Azure roles using the Azure Portal<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Objective Create a new user in Microsoft Azure, grant access to cloud resources, and verify that the user can log in independently without sharing your administrator credentials&#8230;. <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1213","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/posts\/1213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/comments?post=1213"}],"version-history":[{"count":1,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/posts\/1213\/revisions"}],"predecessor-version":[{"id":1215,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/posts\/1213\/revisions\/1215"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/media?parent=1213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/categories?post=1213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/tutorials\/wp-json\/wp\/v2\/tags?post=1213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}