We are in the process of merging Microsoft Learning with Microsoft Learn, which will be complete by June 30, 2020. You’ll find all relevant training and certification information is now available on Microsoft Learn. For more information, refer to the FAQ.
In response to the coronavirus (COVID-19) situation, Microsoft is implementing several temporary changes to our training and certification program. Learn more.


Microsoft Office 365 logo

  • Published:
    February 17, 2014
  • Languages:
    English, Chinese (Simplified), Chinese (Traditional), French, German, Japanese, Portuguese (Brazil), Spanish
  • Audiences:
    IT professionals
  • Technology:
    Microsoft Office 365
  • Credit toward certification:
  • Retirement date:
    April 30, 2019

Managing Office 365 Identities and Requirements

This exam has been retired

For currently available options, please see the Microsoft Certification exam list.

Watch an Exam Prep session from Microsoft Ignite 2017

Skills measured

This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.

Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.

Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.

If you have concerns about specific questions on this exam, please submit an exam challenge.

If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.

There are exam updates effective as of December 14, 2017. To learn more about these changes and how they affect the skills measured, please download and review the Exam 346 change document.

Provision Office 365 (15–20%)
  • Provision tenants
    • Configure the tenant name, tenant region, initial global administrator; manage tenant subscriptions; manage the licensing model; configure tenant for new features and updates
  • Add and configure custom domains
    • Specify domain name; confirm ownership; specify domain purpose; set default domain; move ownership of DNS to Office 365; update and verify domain settings
  • Plan a pilot
    • Designate pilot users; identify workloads that don’t require migration; run the Office 365 Health, Readiness, and Connectivity Checks; run IdFix; create a test plan or use case; set up email accounts for pilot users
Plan and implement networking and security in Office 365 (15–20%)
  • Configure DNS records for services
    • Create DNS records for Exchange Online, Skype for Business Online, and SharePoint Online; update and verify DNS records for Office 365 settings
  • Enable client connectivity to Office 365
    • Configure proxy to allow client access to Office 365 URLs; configure firewalls for outbound port access to Office 365; recommend bandwidth and internet connectivity for clients; deploy desktop set up for previous versions of Office clients
  • Administer Microsoft Azure Rights Management Service (RMS)
    • Activate rights management; set up Office integration with rights management; assign roles for Rights Management; enable recovery of protected documents; set up templates for rights management protected email
  • Manage administrator roles in Office 365
    • Implement a permission model; create or revoke assignment of administrative roles or the administrative model; assign Global administrator, Billing administrator, Exchange administrator, Password administrator, Skype for Business administrator, Service administrator, SharePoint administrator, User management administrator, Compliance admin, Dynamics 365 service administrator, Power BI administrator, and delegated administrator roles, implement scoped admin roles

Preparation resources

Manage cloud identities (15–20%)
  • Configure password management
    • Set expiration policy, password complexity, and password resets in Admin center
  • Manage user and security groups
    • Perform a bulk import (CSV) and soft delete using the Admin center; configure multi-factor authentication
  • Manage cloud identities with Windows PowerShell
    • Configure passwords to never expire; perform a bulk update of user properties; perform bulk user creation using Azure Active Directory cmdlets; perform bulk user license management; hard delete users

Preparation resources

Implement and Manage Identities by Using Azure AD Connect (15–20%)
  • Prepare on-premises Active Directory for Azure AD Connect
    • Plan for non-routable domain names; clean up existing objects; plan for filtering Active Directory; plan support for multiple forests
  • Set up Azure AD Connect tool
    • Implement soft match filtering; identify synchronized attributes, password sync, pass-through authentication, and installation requirements; implement multi-forest Azure AD Connect scenarios
  • Manage Active Directory users and groups with Azure AD Connect in place
    • Create, modify, and soft delete users and groups with Azure AD Connect; perform scheduled synchronization; perform forced synchronization

Preparation resources

Implement and manage federated identities for single sign-on (SSO) (15–20%)
  • Plan requirements for Active Directory Federation Services (AD FS)
    • Plan namespaces, certificates, AD FS internal topologies, AD FS dependencies, WAP topologies, network requirements, and multi-factor authentication; plan access filtering using claims rules
  • Install and manage AD FS servers
    • Create AD FS service account; configure farm or stand-alone settings; add additional servers; convert from standard to federated domain; manage certificate lifecycle
  • Install and manage WAP servers
    • Set up perimeter network name resolution; install required Windows roles and features; set up certificates; configure WAP settings; set custom proxy forms login page; switch between federated authentication and password sync; implement password sync temporary fall back

Preparation resources

Monitor and troubleshoot Office 365 availability and usage (15–20%)
  • Analyze reports
    • Analyze service reports, mail protection reports, Office 365 audit log reports, portal email hygiene reports, Azure AD reports, and SharePoint usage reports
  • Monitor service health
    • Set up RSS feeds; set up service health dashboard with awareness of planned maintenance, service updates, and historical data; configure Office 365 Management Pack for System Center Operations Manager, Microsoft Graph reporting APIs, and Windows PowerShell cmdlets
  • Isolate service interruption
    • Create a service request; identify connectivity issues using the Microsoft Remote Connectivity Analyzer (RCA), Microsoft Lync Connectivity Analyzer Tool, or Microsoft Connectivity Analyzer tool; resolve exchange issues with the hybrid free/busy troubleshooter; diagnose and fix Microsoft Outlook issues with Microsoft Support and Recovery Assistant for Office 365

Preparation resources

Preparation options

Online training
Instructor-led training
Exam prep video

Microsoft Certification PREP Talk: Exam 346

In this episode of Prep tips from certification experts, James Seymour, Senior Content Publisher, and Alistair Spiers, Senior Operations Program Manager on the Office 365 product group, discuss the relevancy of the skills being measured on Exam 346.

70-346: Managing Office 365 Identities and Requirements

Self-paced training
Practice test

Exam Ref 70-346 Managing Office 365 Identities and Requirements, 2nd Edition
Published: August 2017

Prepare for Microsoft Exam 70-346, and demonstrate your real-world mastery of the skills needed to provision, manage, monitor, and troubleshoot Microsoft Office 365 identities and cloud services. Designed for experienced IT pros ready to advance their status, this Exam Ref focuses on the critical-thinking and decision-making acumen needed for success at the MCSA level.

This Second Edition reflects all updated exam topics released by Microsoft through mid-2017.

Buy this book at the Microsoft Press Store

Who should take this exam?

Candidates for this exam are IT professionals who take part in evaluating, planning, deploying, and operating Office 365 services, including dependent and supporting technologies.

Candidates should have experience with the Office 365 Admin center and an understanding of Microsoft Exchange Online, Skype for Business Online, SharePoint Online, Office 365 ProPlus, and Microsoft Azure Active Directory (Azure AD). This includes experience with service descriptions and configuration options, and integrating services with existing identity management and on-premises infrastructure to support the business requirements of an organization.

More information about exams

Preparing for an exam

We recommend that you review this exam preparation guide in its entirety and familiarize yourself with the resources on this website before you schedule your exam. See the Microsoft Certification exam overview for information about registration, videos of typical exam question formats, and other preparation resources. For information on exam policies and scoring, see the Microsoft Certification exam policies and FAQs.


This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format. To help you prepare for this exam, Microsoft recommends that you have hands-on experience with the product and that you use the specified training resources. These training resources do not necessarily cover all topics listed in the "Skills measured" section.