You have a Microsoft 365 E5 subscription and an Azure subscription.

Comprehensive and Detailed Explanation with all Microsoft SC-300: Identity and Access Administrator documents: =

Based on the Microsoft SC-300: Microsoft Identity and Access Administrator official study guide, Exam Ref SC-300, and Microsoft Learn Identity & Access Management modules, Azure provides several mechanisms to manage identity integration and role delegation between Microsoft 365 and Azure resources.

Ensure that users can sign in to Azure virtual machines by using their Microsoft 365 credentials:This requirement refers to enabling Azure AD-based authentication for virtual machines. This capability is provided by Azure AD Managed Identities and Azure AD join support for Azure VMs. Managed identities allow Azure resources, such as virtual machines, to authenticate to Azure AD-secured services using Microsoft Entra (Azure AD) credentials, eliminating the need to manage credentials manually.As stated in the Microsoft Identity study guide:

“Azure AD-managed identities provide an automatically managed identity in Azure AD for applications or services to use when connecting to resources secured by Azure AD. This includes support for user sign-in to Azure VMs using Microsoft 365 or Azure AD credentials.”

Delegate the ability to create new virtual machines:To delegate resource creation and management in Azure, Azure role-based access control (Azure RBAC) is used. Azure RBAC enables granular access management for Azure resources by assigning roles such as Virtual Machine Contributor, Owner, or Contributor at different scopes (subscription, resource group, or resource).Microsoft documentation clarifies:

“Azure RBAC allows you to assign roles to users, groups, or service principals, granting permissions to create, modify, or delete Azure resources, including virtual machines.”