New identity services build on AAD and help manage security of identities, infrastructure access for admins, and application entitlement for users, most at additional cost.

An individual’s Microsoft account is being linked to their work Azure Active Directory accounts by default to facilitate their quest for Microsoft Rewards.

Azure Attribute-Based Access Control, in preview, allows authorizing certain Azure activity at a more detailed level than has been possible.

Sidebar summarizes on-premises and Azure-hosted directory services.

Windows 10 hybrid domain join offers organizations the traditional benefits of AD, like Group Policy, with additional benefits from registering PCs with Azure Active Directory.

Illustration shows a screen shot of Azure RBAC “Check access” tools in the Azure portal.

Azure provides a role-based access control (RBAC) system that allows customers to secure access to Azure deployments.

Azure Active Directory Domain Services offers most on-premises AD functionality for use within Azure

Chart shows Microsoft-hosted identity infrastructure components

Azure Active Directory Domain Services offers most on-premises AD functionality for use within Azure