plan for role assignments
manage roles in Microsoft 365 admin center
manage administrative units [MS-100]
plan and implement privileged identity management for Azure AD roles
choose an authentication method, including Windows Hello for Business, passwordless, and tokens
implement and manage authentication methods [MS-100]
implement and manage self-service password reset (SSPR)
implement and manage Azure AD password protection
configure and manage multi-factor authentication (MFA)
investigate and resolve authentication issues
plan and implement access reviews in Azure AD identity governance
plan and implement entitlement packages in Azure AD identity governance
plan for identity protection
implement and manage Azure AD Identity Protection
plan conditional access policies [MS-100]
implement and manage conditional access policies