Microsoft Office 365 logo

  • Published:
    February 17, 2014
  • Languages:
    English, Chinese (Simplified), French, German, Japanese, Portuguese (Brazil), Spanish
  • Audiences:
    IT professionals
  • Technology:
    Microsoft Office 365
  • Credit toward certification:

Managing Office 365 Identities and Requirements

* Pricing does not reflect any promotional offers or reduced pricing for Microsoft Imagine Academy program members, Microsoft Certified Trainers, and Microsoft Partner Network program members. Pricing is subject to change without notice. Pricing does not include applicable taxes. Please confirm exact pricing with the exam provider before registering to take an exam.

70-346: Managing Office 365 Identities and Requirements

Skills measured

This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.

Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.

Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.

If you have concerns about specific questions on this exam, please submit an exam challenge.

If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.

As of June 30, 2016, this exam includes content covering the latest updates and features of Office 365. To learn more about these changes and how they affect the skills measured, please download and review the exam 70-346 change document.

Provision Office 365 (15–20%)
  • Provision tenants
    • Configure the tenant name, tenant region, initial global administrator; manage tenant subscriptions; manage the licensing model; configure tenant for new features and updates
  • Add and configure custom domains
    • Specify domain name, confirm ownership, specify domain purpose, set default domain, and move ownership of DNS to Office 365
  • Plan a pilot
    • Designate pilot users; identify workloads that don’t require migration; run the Office 365 Health, Readiness, and Connectivity Checks; run IdFix; create a test plan or use case, and connect existing email accounts for pilot users; understand service descriptions and planning to onboard users to Office 365; configure connected accounts
Plan and implement networking and security in Office 365 (15–20%)
  • Configure DNS records for services
    • Create DNS records for Exchange Online, Skype for Business Online, and SharePoint Online
  • Enable client connectivity to Office 365
    • Configure proxy to allow client access to Office 365 URLs, configure firewalls for outbound port access to Office 365, recommend bandwidth, configure Internet connectivity for clients, deploy desktop setup for previous versions of Office clients
  • Administer Microsoft Azure Rights Management (RM)
    • Activate rights management, configure Office integration with rights management, assign roles for rights management, enable recovery of protected documents
  • Manage administrator roles in Office 365
    • Implement a permission model; create or revoke assignment of administrative roles or the administrative model; determine and assign global administrator, billing administrator, user administrator, and delegated administrator; control password resets

Preparation resources

Manage cloud identities (15–20%)
  • Configure password management
    • Set expiration policy, password complexity, password resets in Administration Center
  • Manage user and security groups
    • Import users using bulk import (CSV), soft delete, Administration Center, and multi-factor authentication
  • Manage cloud identities with Windows PowerShell
    • Configure passwords to never expire, bulk update of user properties, bulk user creation, Azure Active Directory cmdlets, bulk user license management, hard delete users

Preparation resources

Implement and manage identities by using Azure AD Connect (15–20%)
  • Prepare on-premises Active Directory for Azure AD Connect
    • Plan for non-routable domain names, clean up existing objects, plan for filtering Active Directory, implement support for multiple forests
  • Set up Azure AD Connect tool
    • Implement soft match filtering and identify synchronized attributes, password sync, and installation requirements
  • Manage Active Directory users and groups with Azure AD Connect in place
    • Delete (soft delete), create, modify users and groups with Azure AD Connect in place, schedule and force synchronization

Preparation resources

Implement and manage federated identities for single sign-on (SSO) (15–20%)
  • Plan requirements for Active Directory Federation Services (AD FS)
    • Plan namespaces and certificates, plan AD FS internal topologies and dependencies, plan WAP/AD FS proxy topologies, network requirements, multi-factor authentication, and access filtering using claims rules
  • Install and manage AD FS servers
    • Create AD FS service account, configure farm or stand-alone settings, add additional servers, convert from standard to federated domain, manage certificate lifecycle
  • Install and manage WAP/AD FS proxy servers
    • Set up perimeter network name resolution, install required Windows roles and features, set up certificates, configure WAP/AD FS proxy settings, set custom proxy forms login page, switch between federated authentication and password sync

Preparation resources

Monitor and troubleshoot Office 365 availability and usage (15–20%)
  • Analyze reports
    • Analyze service reports, mail protection reports, analyze Office 365 audit log reports, analyze portal email hygiene reports
  • Monitor service health
    • Monitor health using RSS feed, use service health dashboard (including awareness of planned maintenance, service updates, and historical data), Office 365 Management Pack for System Center Operations Manager, and Windows PowerShell cmdlets
  • Isolate service interruption
    • Create a service request; determine connection issues using the Microsoft Remote Connectivity Analyzer (RCA), Microsoft Lync Connectivity Analyzer tool, and Microsoft Connectivity Analyzer tool; determine availability issues using the hybrid free/busy troubleshooter; determine client configuration issues using Office 365 Client Performance Analyzer and Microsoft Support and Recovery Assistant for Office 365

Preparation resources

Preparation options

Instructor-led training
Find a Microsoft Learning Partner near you
Exam prep video

Microsoft Certification PREP Talk: Exam 346

In this episode of Prep tips from certification experts, James Seymour, Senior Content Publisher, and Alistair Spiers, Senior Operations Program Manager on the Office 365 product group, discuss the relevancy of the skills being measured on Exam 346.

Self-paced training
Practice test
From the community

Exam Ref 70-346: Managing Office 365 Identities and Requirements
Published: June 24, 2015

Prepare for Microsoft Exam 70-346—and demonstrate your real-world mastery of the skills needed to provision, manage, monitor, and troubleshoot Microsoft Office 365 identities and cloud services. Designed for experienced IT professionals ready to advance their status, Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the MCSA level.

Buy this book at the Microsoft Press Store

Who should take this exam?

Candidates for this exam are IT professionals who take part in evaluating, planning, deploying, and operating the Office 365 services, including its dependencies, requirements, and supporting technologies. Candidates should have experience with the Office 365 Admin Center and an understanding of Microsoft Exchange Online, Skype for Business Online, SharePoint Online, Office 365 ProPlus, and Azure Active Directory. This includes experience with service descriptions, configuration options, and integrating services with existing identity management and on-premises infrastructure to support the business requirements of an organization.

More information about exams

Preparing for an exam

We recommend that you review this exam preparation guide in its entirety and familiarize yourself with the resources on this website before you schedule your exam. See the Microsoft Certification exam overview for information about registration, videos of typical exam question formats, and other preparation resources. For information on exam policies and scoring, see the Microsoft Certification exam policies and FAQs.


This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format. To help you prepare for this exam, Microsoft recommends that you have hands-on experience with the product and that you use the specified training resources. These training resources do not necessarily cover all of the topics listed in the "Skills measured" section.