Users, groups, domains, roles, administrative units, and hybrid identity
Domain Weight
Implement and manage user identities accounts for 22% of the SC-300 exam.
At roughly 20–25% weight, this domain covers day-to-day Microsoft Entra identity administration — tenants, users, groups, roles, and hybrid sync.
Domains, branding, and tenant basics
- Add and verify custom domains (TXT/MX) before using them for UPNs
- Set a verified domain as primary so new users avoid onmicrosoft.com UPNs
- Configure company branding for the Entra sign-in experience
- Know tenant properties, group settings, and privacy contacts
Roles and administrative units
- Prefer least-privilege built-in roles (e.g., Helpdesk Administrator) over Global Administrator
- Create custom roles when built-in permissions are too broad
- Scope role assignments with administrative units for regional or departmental admins
- Use dynamic AU membership when department attributes drive scope
Groups, attributes, and hybrid
- Security groups for role/access assignment; Microsoft 365 groups for collaboration
- Dynamic membership rules for automatic group population
- Custom security attributes for searchable business metadata
- Microsoft Entra Connect Sync vs Cloud Sync; soft-match vs hard-match linking
- Entra join, hybrid join, and registered device options
Exam Focus Areas
- Focus practice on Custom domains and company branding and Microsoft Entra roles and custom roles — high-frequency exam topics
- Complete timed practice questions for this domain before moving on
Practice This Domain
Test your understanding with free practice questions at /certifications/microsoft/sc-300/practice — focus on: Custom domains and company branding, Microsoft Entra roles and custom roles, Administrative units and scoped role assignments.
