Open more doors with role-based certification. Certify with Confidence offers you more chances to pass.


Microsoft logo

Microsoft 365 Identity and Services

  • Image of Azure Expert badge

    Part of requirements for Microsoft 365 Certified : Enterprise Administrator Expert

    With Microsoft Certification, technology professionals are more likely to get hired, demonstrate clear business impact, and advance their careers.

    About the certification
* Pricing does not reflect any promotional offers or reduced pricing for Microsoft Imagine Academy program members, Microsoft Certified Trainers, and Microsoft Partner Network program members. Pricing is subject to change without notice. Pricing does not include applicable taxes. Please confirm exact pricing with the exam provider before registering to take an exam.

Skills measured

This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.

Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.

If you have concerns about specific questions on this exam, please submit an exam challenge.

If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.

Design and Implement Microsoft 365 Services (25-30%)
  • Manage domains
    • Add and configure additional domains
    • Configure user identities for new domain name
    • Configure workloads for new domain name
    • Design domain name configuration
    • Set primary domain name
    • Verify custom domain
  • Plan a Microsoft 365 implementation
    • Plan for Microsoft 365 on-premises Infrastructure
    • Plan identity and authentication solution
  • Setup Microsoft 365 tenancy and subscription
    • Configure subscription and tenant roles and workload settings
    • Evaluate Microsoft 365 for organization
    • Plan and create tenant
    • Upgrade existing subscriptions to Microsoft 365
    • Monitor license allocations
  • Manage Microsoft 365 subscription and tenant health
    • Manage service health alerts
    • Create & manage service requests
    • Create internal service health response plan
    • Monitor service health
    • Configure and review reports, including BI, OMS, and Microsoft 365 reporting
    • Schedule and review security and compliance reports
    • Schedule and review usage metrics
  • Plan migration of users and data
    • Identify data to be migrated and method
    • Identify users and mailboxes to be migrated and method
    • Plan migration of on-prem users and groups
    • Import PST Files
Manage User Identity and Roles (35-40%)
  • Design identity strategy
    • Evaluate requirements and solution for synchronization
    • Evaluate requirements and solution for identity management
    • Evaluate requirements and solution for authentication
  • Plan identity synchronization by using Azure AD Connect
    • Design directory synchronization
    • Implement directory synchronization with directory services, federation services, and Azure endpoints
  • Manage identity synchronization by using Azure AD Connect
    • Monitor Azure AD Connect Health
    • Manage Azure AD Connect synchronization
    • Configure object filters
    • Configure password sync
    • Implement multi-forest AD Connect scenarios
  • Manage Azure AD identities
    • Plan Azure AD identities
    • Implement and manage Azure AD self-service password reset
    • Manage access reviews
    • Manage groups
    • Manage passwords
    • Manage product licenses
    • Manage users
    • Perform bulk user management
  • Manage user roles
    • Plan user roles
    • Allocate roles in workloads
    • Configure administrative accounts
    • Configure RBAC within Azure AD
    • Delegate admin rights
    • Manage admin roles
    • Manage role allocations by using Azure AD
    • Plan security and compliance roles for Microsoft 365
Manage Access and Authentication (20-25%)
  • Manage authentication
    • Design authentication method
    • Configure authentication
    • Implement authentication method
    • Manage authentication
    • Monitor authentication
  • Implement Multi-Factor Authentication (MFA)
    • Design an MFA solution
    • Configure MFA for apps or users
    • Administer MFA users
    • Report MFA utilization
  • Configure application access
    • Configure application registration in Azure AD
    • Configure Azure AD application proxy
    • Publish enterprise apps in Azure AD
  • Implement access for external users of Microsoft 365 workloads
    • Create B2B accounts
    • Create guest accounts
    • Design solutions for external access
Plan Office 365 Workloads and Applications (10-15%)
  • Plan for Office 365 workload deployment
    • Identify hybrid requirements
    • Plan connectivity and data flow for each workload
    • Plan for Microsoft 365 workload connectivity
    • Plan migration strategy for workloads
  • Plan Office 365 applications deployment
    • Manage Office 365 software downloads
    • Plan for Office 365 apps
    • Plan for Office 365 Pro plus apps updates
    • Plan for Office 365 Pro plus connectivity
    • Plan for Office online
    • Plan Office 365 Pro plus deployment

Who should take this exam?

Candidates for this exam are Microsoft 365 Enterprise Administrators who take part in evaluating, planning, migrating, deploying, and managing Microsoft 365 services. They perform Microsoft 365 tenant management tasks for an enterprise, including its identities, security, compliance, and supporting technologies.

Candidates have a working knowledge of Microsoft 365 workloads and should have been an administrator for at least one Microsoft 365 workload (Exchange, SharePoint, Skype for Business, Windows as a Service). Candidates also have a working knowledge of networking, server administration, and IT fundamentals such as DNS, Active Directory, and PowerShell.

More information about exams

Preparing for an exam

We recommend that you review this exam preparation guide in its entirety and familiarize yourself with the resources on this website before you schedule your exam. See the Microsoft Certification exam overview for information about registration, videos of typical exam question formats, and other preparation resources. For information on exam policies and scoring, see the Microsoft Certification exam policies and FAQs.


This preparation guide is subject to change at any time without prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format. To help you prepare for this exam, Microsoft recommends that you have hands-on experience with the product and that you use the specified training resources. These training resources do not necessarily cover all topics listed in the "Skills measured" section.