I currently work as a Microsoft 365 and on-premises Exchange administrator, with most of my experience in Entra ID and some Intune administration. I also manage a small nonprofit Microsoft 365 tenant with about $1,000 in Azure credits. I'd like to use that environment for hands-on learning through practical projects that resemble real production work, while keeping costs under control. What Azure projects, learning paths, or areas should I prioritize given my background?
5 Answers
A useful progression would be to build a small secure application environment, connect it to Entra ID, restrict access with RBAC, add monitoring and alerts, then recreate it using templates or Terraform. After that, try a hybrid scenario such as connecting an on-premises network to Azure in a lab. These projects tie your existing Microsoft 365 knowledge to cloud administration while giving you experience with identity, networking, security, automation, and operations.
A good structured route would be to start with AZ-900 if you need a cloud fundamentals overview, then work toward AZ-104. The certification learning paths include plenty of hands-on exercises, and you can recreate many of them in your tenant. Focus on actually building and troubleshooting resources rather than only reading the material. The projects and experience will be more valuable than the certificate by itself.
Be very deliberate about costs, especially with virtual machines. Use the smallest suitable sizes, shut down or delete resources when you’re finished, and set a budget with alerts before starting. Check whether services have free tiers or nonprofit benefits, and avoid leaving public IPs, disks, gateways, or managed databases running unnecessarily. Learning to monitor and control spending is itself an important real-world Azure skill.
Since you already work with Entra ID, permissions, RBAC, PIM, managed identities, and service principals should be familiar territory. I’d make networking your next major focus: virtual networks, subnets, NSGs, private endpoints, DNS, routing, and connectivity. Build a small environment, intentionally break parts of it, and then fix them. If possible, define everything with infrastructure as code and keep it in Git so you develop repeatable production habits.
Don’t try to learn every Azure service at once. Start with the core concepts: identity, networking, compute, storage, monitoring, governance, and cost management. Microsoft’s structured learning paths are useful because they combine explanations with small labs. A practical starter environment could include a virtual network, a small Linux or Windows VM, storage, Log Analytics, alerts, RBAC, and a basic backup plan.
I don’t have much networking experience yet. Do you have any beginner-friendly resources or a safe way to build my first network from scratch? I’m worried about creating an insecure configuration or accidentally exposing something.