Hi, everyone. Welcome back to C# on a live show. I'm your host, Stephen Simon
And once again, I'm back with another episode of C# on the MP show
One of the shows I really like to host where I go ahead and invite uh community leaders who contribute their time apart from their
job and, and contribute to the community. It's a pretty exciting show that I really love it and welcome everyone for those who are joining
us for the very first time. We do these live shows every day at 10 a.m. Eastern
And in fact, we do so many live shows that I like to call it that we stream eight days in a week
All right. So just quick reminders before I go ahead and get started about the different shows that we do on Monday
we do a show at 10 a.m. Eastern all times where we talk about the different offerings and
and different services that Microsoft provides on Asure. Pretty cool thing. Then on Tuesdays
we have a product showcase and coffee with pros where we do kind of video podcast chat with uh with community leaders or product managers
Sometimes at Microsoft and, and any other guests too. And on the same day
we sometimes also have product showcase where we focus on one particular product and talk about it
The other day, we had guys from a coat factory and we did a great show
Don't forget to check that out too. Then on Wednesday as it is today
we do see Chef For Fish. I did mention about what this show is and today we have a very interesting get and I'm really
excited to host her. OK. Then on Thursdays, we have asked me anything
We are at episode number 30. Now, it's one of the most popular shows that we run
You can go ahead and ask any questions to your speakers. They do some technical sessions
we do chit chat and a lot of fun in those episodes too. Then on Friday
we have good mindset. That's why mahesh who was a fond of C# on the way, he tells you how to go ahead and
and grow in your career and just stop coding for a long while
I mean, you shouldn't go for a long while, right? Some at some day you should start coding and lead a day
And then on uh Saturdays, we do rock in the code world with dot net day with David brings the speakers from the dot net
ecosystems and what an amazing lineup he has brought in Scott Hunter
uh Matt Stodge and Ka Evans Caitlin do and what not. So definitely those are the shows that we run at C# corner
And apart from that, we also do virtual conferences and uh as I say
eight days in a week. So we talking about today for today's Mep show
we have Minka. Unfortunately, I just cannot say her last name. So I'm just going to avoid that
Uh Minka is a senior program manager, she is a tech speaker and in fact
she is very active in the community. You can often find her speaking in virtual events these days
She has been active uh even when, when things were normal uh in the offline events
She is a Microsoft Certified professional. She's an author, blogger. She loves to write and uh she loves all about ajun dot net core and
uh guess what? She's also my, she, she has been a micro student partner and
and I just love hosting people who come from that background because that program was so amazing
But before I do that, I just quickly want to show her that why I'm really excited because
because because main guy is a superstar and just go ahead and see she is
has been a featured speaker in the dot net conference with Leslie and Scott Hanselman
who I'm, I think I'm looking at the next big superstar in the community
All right, having said that, let me go ahead and invite Minka. Hi
Minka. Welcome to the live show. Yeah. Hello Sam. Hi, how are you
I'm doing good. Thank you, Monika. Thank you so much for your time. We really appreciate uh for accepting the invitation and uh looking
looking at your profile. Menka. Let's, I, I quickly want to talk about the uh the
the community stuff that you do and how did you get into it
And uh how, how, how did you come to know about C Shap at the first place
Yes, I started writing blogs from my third year of engineering in Samana
I still remember the days I, how I started writing and from a and from all of the community members
I got a great support whenever I'm writing my first article even uh there will be a lot of mistake
there was a lot of corruption. These people helps me a lot. And from the start to nowadays
I have written around 50 plus article in Cop corner with two future article
So with 1 million liters. So that is where I started until now
I'm going community activities. That's great. I mean, 1 million, let me go ahead and check it out
All right. It's exactly the way it's 1.4 million. I mean, you have reached so many people with over like 47 articles
some forums, a couple of them are featured. Uh So definitely me quick question
How do you, how do you get time? I say you work full time, right? So you work in an organization you did start from
from the college. But how do you get time? And when do you do write these articles
uh, mostly, uh, writing the article which is related to the skill
what we are working is quite easy. Whenever we are going with some other skill
then it could be hard. So I usually write on what I work
what I have the research I will do daily to do activities. So that's how I manage my time with writing articles being a professional
Well, but that definitely makes sense. You know, I mean, you are working on it full time
You're working on projects, client projects. If you find any problem over there
you have been struggling. So what you do, you go back home and you try to write an article and then you share with the
community that, that, that's amazing when you come. So um looking, looking at today's topics
uh it looks like we're gonna talk about. Uh I, I forgot the topic. I'm not a major expert
It says top essential skills for Microsoft ad. You admin. So what is it
I mean, I know you have slides and demos a quick, quick uh thing that what we're gonna talk about in today's live show
Yes, actually, uh what we are going to do see on today's session is about essential skills for uh your administrator
For the past. I have been delivering sessions in various as related things
I will have a question at the end of every session. Like uh do I immediately need a coding stuff to work on as what
category I can work? I've been from admin. So to make it clear today
I just want to make uh have this as a show to make what are the skills need to process for admin
So that is what I took this uh topic today in today's session
Sounds pretty interesting. I mean, he raised, he raised the fact that you really need to go ahead and
and, and work on Azure because Azure is, is like everything right
Anyone can go ahead and get started with Azure and in fact, they have an amazing product in the Microsoft line that are power apps
where you don't really even need to go to go ahead and build applications and mobile apps
So definitely really excited for that many car and I think you can go ahead and start to share a screen and then I'll put
it into the live stream and for all the guys who are
who are watching, feel free to drop any, any questions in the comments
And we will make sure that we, we answer that towards the end of the session
It doesn't have to be technical. It can, it can be anything that you want to ask to Monika
So Monika, I see a screen. I'm gonna add it to the stream right now
Yes and yes, perfect. You can start next, next uh 35 40 minutes
It's 25 minutes early hours. Yes. So today's session is all about essential skills for a Microsoft assured administrator
as I said before, like uh why I took this topic is to mainly differentiate the roles and responsibility performed by a developer as well
as an administrator. So many sessions at the end, people will come up with a common query
Like I should be a development uh developer or I should be a tested to get into the Azure or I'm from a different team
I'm from ASAP and I just want to get into Azure. Is it possible for me
Can I add up to this technology to make this uh clear? I took this topic as my session title
So what are the skills that is required for Azure administrator? So if you go into the Azure admin in there are a lot of
services available in a beauty and storage and as well as the security
And so getting into each and every services is like OK, getting into the particular technology depth
So I took some of the technology, some of the services that can easily be adaptable and easily get into the today's trending scenarios
So that is what I'm going to discuss in further upcoming slides
So let's get into this session. So before that, I'm Annika Bhaskar Piling
I'm currently working as a senior programmer with uh Azure and dot Certified Professional along with a blogger
you can find my blogs in my C sha profile as well as for any doubts and clarification
you can reach out to me via my Twitter or link them. So today's agenda
what are the roles and responsibility of Azure admins? So in virtual machine
if I go with the traditional approach of creating a virtual machine, managing the virtual machine and monitoring the virtual machine
then it could be a very basic stuff. So in virtual machine as a compute
what is a today's trend? I took hyper V virtual machine and in a security and how we can able to adapt the security as
an admin, how I can able to monitor and maintain the security by means of network security group in area as in another end
So I took this both topic along with ASU storage. The storage topic is quite vast even if you are a developer
Also, if you need to adapt a particular storage, for example, Cosmos DB or a blog
I need to go into the particular storage and I need to get a depth knowledge then only I can able to easily adapt to
particular service. But in Azure admin, you don't need to invest that much time as a developer to get into the particular service
you can easily manage your storage container by means of Azure portal itself
So I took Azure storage as one topic at last Azure data lake because uh nowadays the machine learning algorithms
All other algorithms are mainly depend on data lake and training, training the models
So to make this particular topic into uh highlight, I took the data lake story
Uh Also one of the topic of today's discussion to make it like what is today's trend in data lake
How machine learning algorithm are getting process and what are the roles as admin you can perform in the data lake
So all together what we are going to see in today's session
So first let's get into roles and responsibility of Azure admin as a developer
For example, I'm a developer. I just want to create a virtual mission so that I can able to adopt my user to the client
uh environment. So developer usually write a power script or CLI or he can use the Azure portal to create a virtual
mission. I'm a a what the action I can perform on the particular virtual machine
At first, number one, I can able to maintain and monitor the particular virtual machine
not only virtual mission you can able to do the same in your app service also by integrating with the assured monitor or application inside
In second thing, for example, I want to auto scale or I want to make my CPU to in quite bigger size or I just
want to make the particular IP address to connect with my virtual mission. These are are the roles I can perform in the virtual mission
So this is how what uh admin can perform uh in a Azure virtual mission
not only in Azure virtual mission but other services also, this will be quite adaptable
For example, some services will have autos scale in future to be get adapted based on the number of ports availability
Because whenever there is no user, I don't want my service to available for everyone
So I need to reduce the number of ports. And sometime whenever there is large number of requests
I just need to increase the number of parts to perform this auto scale writing the scale rule condition
All this activity can be performed from the admin. So this is in the compute stage
What are the roles I can perform in the storage and as well as in a security and we can discuss in the next upcoming
slide. So commonly, the cloud administrator manages the cloud services that expand storage
networking and compute cloud capabilities. So compute storage, network and security. All these four categories
the person who maintain and monitor the particular functionality, how the particular services behaves
These are the rules performed by ASU administrator. So here the writing of code of performing the scripts
action are very lesser. Every action can be taken from your Azure portal in itself
So there is very lesser uh chance of writing the scripts or CLI s or any anything that belongs to the development activity for a
new application. Whenever we are uh doing a migration activity, for example
from on premise to a cloud, I'm doing some migration activity. So I just want to make sure the particular environment is getting adapted to
the present application. Simple example is I'm just want to migrate my CQL DB to cloud
So as admin, they are asking me, uh what are the features
what are the cost ways I can able to perform this action in my uh or any other cloud service provider
So as I admin I can discuss that in a Cosmos DV, there is an A P A available especially for a SQL
So this makes the migration work easier from the throughput and latency
We can able to produce this much cost for this much storage I can able to identify
So all these practices can be done from the Azure admin and in a storage
So for a migration or creating any new application to make it optimal for its performance
to make it works good for the particular stability, all those activity can be done from the Azure admin
So cloud administrator mostly use the Azure portal, then later power and command line interface
This is what I want to stress here. We will use the Azure portal as a major endpoint
We will very lessly use the power shell as well as the CLI for performing activity
As I said before, it is a work of the developer to create a virtual machine in very dark case that we also will do
that. But from Azure portal rather by creating by means of cli or from the powershell
So good experience on operating system virtualization, cloud infrastructure storage structure and networking
These are the characteristic features of the Azure admin. So those one who have very good background from the managing the operating system
or infrastructure or from managing the storage environment. These are the people you can able to adapt to the Azure administration roles and responsibility very
easily. So these are the basic stuff that the Azure admin need to carry
So getting into the topic of uh virtual mission, as I said before creating a virtual mission
maintaining and monitoring, all those stuffs will be a very basic stuff which we can able to perform from a Asure portal itself based on
the requirement. I can able to add the CPU size, I can able to reduce the all other dependency based on the requirement
But what is a trend uh because uh for our technology, today's trend is very important
the standards and other a common future which makes the particular technology to add up for everyone is the main reason when we are getting
into any service. So what is today's trend like hyper V virtual machine
Uh This is quite new as well as quite uh interesting one uh which is adapted by me in recent
So I may know like uh this is very, quite easy to work
Also because whenever we are doing with the virtual mission process, the client will require some type of operating system to work on that after
some few times, if he will say like uh I just need the same application to run on some other virtual uh some other environment
For example, uh operating system, Linac Windows, it rapidly they will change based on the dependency
So in that cases, I feel this hyper V virtual machine is very helpful because it lets you have multiple operating system as a virtual
machine on your windows. So you can able to adapt any kind of operating system that works on your window
So it will provide your hardware virtualization also. So that is one of the key feature which you can adapt easily
The main and important reason of hyper V virtual machine is you can able to create a hard drives as well as virtual switches and
all other things that need for a virtual device inside your virtual machine
So you don't need to add any other services to make your virtual mission to work together with your drives or with switch or any
other capabilities. Everything can be adapted easily by means of hyper V virtual mission
So this is how hyper V virtual machines looks like. So whenever your client asks you to change the OES and test your app
you can easily do that by means of adapting it to the Hyper V virtual machine
As I said before, this, you don't need to create from your power shell or from a cli from virtual portal
You can able to create it easily and you can able to span it according to your client requirements
So the reason to use a virtual virtualization is it run you a software that requires an older version of Windows
For example, I just have my application that run on my older version of Windows
So it is impossible for me to change my Windows os and then adapt to that to my application for a single application
By means of this virtualization, I can be able to do that easier
So at the same time for a non Windows operating system, also as I said before
if it is a Linux or some other operating system, I'm changing it completely on my Windows
it quite hard for me and it will take a lot of time. So instead of that I can able to perform this activity by
means of hyper-v. So experiment with other operating system, hyper-v makes it very easy to create and remove different operating system
So adding as well as removing is quite easier and the time consumption is also very less
So with hyper V, you can run them all on a single desktop or a laptop computer
So this is one of the important point, you can perform every action on your single desk desktop as well as your laptop
So this virtual machine can export it and then import it into any other Hyper V system including Azure
So you can able to perform the task as a separate one or you can able to incorporate that in your Azure services also that
is one of the future of this hyper V visualization. So in virtual machines
the concept that is in today's trend is hyper V concept. So adapting hyper-v make us to work easier in all other aspects as I
mentioned in this point. So this is one of the main and important service that need to be known by the Azure admins who works
on a compute bo especially in a virtual mission. So what are the system requirement that you need for adapting this Hyper V is it
will be available on a 64 bit versions of Windows 10 pro enterprise as well as an education
It is not available on a home edition. It will run one or more virtual machine on a computer with a four GP of RA
M. So it is sufficient. So you need to have a valid license for an operating system you use in the VM
Usually for VM, we need to have a valid license. So as like that you need to have the valid license for U using this
hyper-v also. So this is one of the requirement that needed for the hyper-v
So next getting into the Azure active directory. So after a virtual mission the major endpoint where the Azure administrator will
work is Azure active directory. So why this aur active directory is quite important service being assured ain which I will discuss in further slide
So what are are the things we are going to see here is what about active directory
What are are the concept associated with that? What is ad join as well as self service
Positive? That is SS pr so this is all we are going to discuss in this security concept and so active directory
So before I have set of rules and conditions for my on premise to get access
So when it is getting into my cloud, what are the things I can able to perform
For example, I can give you a simple example, giving an office 3 65 account access makes me to work on all my organizational things
like including my SharePoint site teams outlook. So the how they are performing this activity from the cloud here
So these a lot of the features that been adapted from the Azure active directory
So it enable you to securely manage access to Azure services and resources for your user
So it will include the SAS application also. So don't forget the SAS application
it will include the SAS application also. So it provide application management by means of authentication as well as it have the device management also
which is adaptable to the hybrid environment. So this is a normal uh diagram which describe how we can able to access the uh cloud
services by means of active directly by means of authentication by using open ID connect or authentication with the WS Federation as well as a
sal authentication. So the same action will be formed in my on premise also where we use a windows server
active directory with a normal authentication with CROS. So those are are are the things that will come under the active directory
So what is the role of admin for using the particular uh services
So that is main, these services is quite commonly used by admin because uh here as a developer and we will have not
that much activity to perform in this particular services. So providing the access and making the particular organization features to available for particular user
and adding the particular user to particular tenant ID, all this activity will be performed by the administrator
So this is one of the special services that is meant one day for administrator
In some cases, developer will also work on this service. So the ad concept which will include the following key points which include the identity
account. I should ad tenant as well as the subscription. So application which you which you need to authenticate will come under the identity
the account, the data associated with the particular app with the directory of the tenant
This is a part particularly this is where you will give or add your resource
This is like a club, a tenant is automatically created when your organization signs up for your Microsoft cloud subscription
So this is an instance of a ad in short while and as well as a subscription
this is a paying option for your cloud service. So the dairy joint
as I said before, uh what is new in this particular service like uh this is something like uh I can
what are the services I'm saying new that is not in means of recent time it getting uh originated
it is already there. But the visibility is very less sir. In that concept
I'm telling that it's new. So the daily joint is one of the beautiful thing like a single sign on to your Azure manager
S A app and service. So, so by means of single authentication
you can able to log in on multiple things for your organization that is like uh ad join
So restriction of access to apps only from the complaint devices. That is also one of the future seamless access to on premise resource
So the ad join is based on the cloud first approach, as well as it works on the hybrid environment
You can work with the on premise environment also. So this is one of the thing and A P
So it will determine who can use the self-service uh you have created
So that is why they named as a self-service password reset. You can choose the number of authentication methods required as well as the methods
available. You can able to do this action by means of email
phone questions, any kind of authentication you can able to use, you can require user to register the same as like the multifactors authentication
Many cases we will use VPN, same like that you can able to use in your SS PR also
So this is one of this. So in next coming to the network security group
so NST, what we are going to discuss is NST filters. So this is one of the quite good service for admin to adapt whenever
they are working in the virtual mission because I can able to uh manage my inbound and outbound traffic by means of network
security group. So this is one of the important services also uh that need to adapt for who the people who works both on the
security end as well as in the admin end. It is constructed based on the security rules which allow or DV
your inbound traffic to or fro from your as you. So all network security group contain a set of default to
you cannot delete the default rule, but since they are assigned with the lowest priority
you can ignore it. For example, this is concept is like I want my virtual machine to get connect from my windows
But uh I'm creating two virtual machine for a one virtual machine. I want it to connect from my Windows normal personal lab
another virtual machine which should not be connect from my Windows. That is my personal lab
But the second virtual machine which m created need to be connected from the first virtual mission which I have already created
So I can be able to write or set the rules for my requirement
So that is how the network security group works. So the things
what are the rules it will follow? Like the name should be unique within the NST and the priority should be 100 to 4096 number
will low number will have high priority. So if you are setting some rules
set the rule based on the priority number. If you give 100 and then you set the rule
then the 100 rule will have the high priority. The source and destination
It is your IP address and the protocol, it is the TCP or UDP as well as the direction
either it's the inbound network or outbound as well as the poor range and action to perform
Like allow the particular or or they need the particular. So these allow the actions that need to be performed in our rule section
So what is a virtual network? It's a fundamental building block for your private network in Azure
So Azure resources securely communicate with each other within the Azure internet as as well as in your on premise environment
So the filtering the activities or filter network traffic will be performed by means of network security group as well as a network virtual appliances
So all these features will be uh work uh and it will be adaptable technology to those who works in the security end of the
cloud as well as for the people who've been an admin. And also whenever they are working in the virtual machine
So there is some of the limitation also because while adapting particular services
even though it is quite uh easy to adapt as well as a user friendly also
But there is some limitation. So it has some limitation where you have the network interface codes for 65,005
36. And other like you can write the rules per NST 4000 when you cannot exit more other than that
And you have only limited virtual network support also. Anyway, it is sufficient to go for a particular virtual mission
So subnets per virtual network also 3000 as well as the public IP address
you can able to access this still. So there's a lot of the limitations. So services that can be deployed into the virtual network
So as I said before, you can adapt this network group, not only to the compute port of virtual machine
we can able to do this in your network area for application gateway as well as in Ur firewall in data
And you can use this in a red catchy as well as the container and defa we need to use for whenever
wherever you are using a CNET service as well as in a web
we can able to use this with a logic app. So all these places we can able to deploy this virtual network into our Azure
services. So how energy works? Usually, if we have the virtual machine
my inbound traffic and outbound traffic will be determined by means of network security group
Usually this network security group that belongs to the subnet will perform
For example, in the first VM one, the network security group one will per or de uh the incoming traffic
And after the network security group, after that network interface will perform the action
And then the virtual mission one will take action. So this is how the inbound traffic works
You can able to add the rule to allow or be the port uh whatever action you can able to perform will purely depend on
the first network security group. Once it is done, then it will depend on the network security group
Same thing if you don't have any network security group too, then the network security one which is associated with the subject one will perform
the action in VM two. In uh next VM three, we don't have a ne network security one
So the security two along with the interface will perform the action for VM three
If there is no network security group, I have only my network interface there will not be any distraction
So all my port in inbound and outbound traffic will be automated
So next, we are getting into the storage concept. This is one of the uh wonderful service which I like uh preferably in all other
ASU services ASU storage because there are a lot of uh services to explore in Asus uh storage
For example, in Cosmos TV, you have around five A P A to support from the uh normal SL API to all other A P
A whenever you are doing migration or active, that is very helpful
If you are coming to unstructured data storage, there is a blob storage where you can able to store the all the unstructured data as
well as you can perform all the function grid activities also to make it work uh accordingly to the request of your client
So all other things you can able to perform in a storage in. But what is the action that can be performed from the admin
in, as I said before. Um for a already existing storage, you can able to monitor the cost conception as well as the behavior of
the storage, the activities of incoming and the deleting files. For example
creating a simple as storage and adding the assure function and monitoring the files getting uploaded and the files getting downloaded and locks
log files, which is generated all the activity can be performed from the assure admin
So this is a service that you can able to use to store the files, messages
tables and other information. So it is a durable, secure scalable as well as accessible one
So storage for virtual machine and structured data and structured data. All the storage are available in Azure services
So you have two tires is a standard HDDD as well as premium
This concept belongs to the drive concept. So this is basic all about Azure storage
So what are the storage criterias? I have like uh I can have a containers where I can able to store my files for unstructured
data, separate files concept. Also that there is a tables as well as queues in all the services
The role of admin will be vary. For example, as I said before
if I'm going with the container, I can able to monitor by means of integrating with Azure function
I can able to add some input and output bounding and I can perform the task
So that could make my work easier as admin. So files also it will vary but the steps will be quite similar only
So these a lot of the services that can be as Azure admin we can work on
So data lake storage. So this is the last topic of uh today's session which I have uh told like 01 of the important topic
uh in today's recent trend. What is the use of a data lake
So what is this data lake? What action has a mean I can perform
It is an enterprise wide hyperscale repository for big data analytic workload enables you to capture data of any size and type
It is designed to enable analytics on the stored data and it is tuned for performance for data analytic scenarios
So it includes all great capabilities that includes security, manageability, scalability, reliability as well as availability in quite
common. What is data like? For example, you have a data where you don't know what is the exact form or schema of the data
So in these cases, analyzing storing, performing action of on the particular data is quite difficult
Because if you know the format of data or how the data is being stored
we can able to use the data for further processing. Whenever we are performing a machine learning or any other activity for a cognitive service
we need to train a model, we cannot train a model based on the data that is available for 10 days or 20 days
For example, I'm creating a pre analysis. I want to train my model
I want to store uh the data for training the model. I want the data from various sources to get accumulated
In these cases. If the data have no form or structure or any other idea about the data
I don't have any other idea about data, I cannot be able to use the data for my further processing
Because for training a model, I need to have the data, which is for a decade based on the requirement
So long term storage of data as well as without the form
the processing, the data is quite difficult. So all these remits can be rectified by means of data lake storage
So you can able to store it or capture the data of any size as well as any type
So this is how uh data lake storage works. First, we need to ingest as well as then we need to prepare and and then
we need to store as well as at the end we need to analyze. So this is a process in native format
we need to get the raw data. So there is the point where as an admin end
we will work because the data will be in a different format for admin
it will be quite difficult for us to differentiate the data. And then for example
even it is a thousands or 10 thousands of data, it's quite common to accumulate the data
But if it is more than a decay of data, then the I think about the size of data as well as the format of
data, it is quite hard for us to determine the capabilities of data
So in just in the native format is quite easy by means of as your data like storage and preparing
for example, annotating, separating or enriching the particular data based on the schema
Once after having the raw data preparing. The data is quite easy with the data lake
After that, after preparing and creating after annotating all this action, we need to store the data for further analysis cannot say like
storing the data today and using the data tomorrow as like using the hot and cold tire in blob
I can use the same like that. We cannot say that concept in data like storage
We need to store the data maybe for a year or for uh decades because the data which is getting today may be used after
10 decade also. So we cannot able to do for a short term
So storing also very uh harder in nowadays of data concept. So storing data is another one
And after that analyzing the data. So we have a lot of uh tools that need to analyze the data
For example, who those who are working in a Hadoop's Plank and spark environment
they know how to analyze the data. This data is do not only use it for this purpose with other tools like Hadoop spark cause
plank environment. Even this data may be used in a further analysis
For example, in cognitive service, they having a inbuilt API how this API are getting generated
These API S are getting generated based on the trained models where the trained models being obtained
These models are being trained from the data which is already available
So getting the data storing the data optimizing the data and performing tasks
All this need a lot of effort. So these actions being performed easier by means of a data like storage
So this is one of the important services that need to adapt. So securing data and data lake
we can use a authentication as well as authorization, access control, authorization
as well as you can encrypt the data also. So authentication with a data lake as usual
what we use to authenticate is like end user authentication with the credential service to service authentication is one of the new things that we
can adapt in data lake. Uh uh services like use this if you have A P need to access the data lake with without user
intervention. For example, I have an application from my application, I have an A P A from the A P A uh call
My data will get access for these cases. I don't have a rare authentication to the particular data
So I need to do by means of api authentication. So that activity can be performed by means of service to service authentication
So access control in a data lake storage, you can manage the access control
Uh you can do from folder level file level because uh everywhere data
because I know all services, the complaints, they made a lot of certificates
So you can able to add the security level from a folder file level everywhere
Uh What type you want for your particular data. So there are three permission as like usual data storage
read, write and execute. Uh It's like your cosmos and then permission for an item stored on the item itself
In other words, permission for an item cannot be inherited from the parent item usually in storage after creating a folder and setting some of
the security level that we can inherit the folder and then we can create the pa uh child folder and we can inherit all the
property of the parent folder. But that is not possible here because you need to reset everything for an individual files as well as folder
based on your requirement. There is nothing like inheritance from the parent folders
So I hope today's session all this club together from the compute storage
networking, security, all this together, I have concluded this uh session for any doubts
We can have that discussion. Now. Wow, Monika, that was a very clear and crisp presentations
And I really love that you covered almost the entire ecosystem of the Azure administrator
And what are the major crowds want you to go ahead? And if someone is willing to go and get started
we have a couple of questions. I'm gonna put it on the screen that we have
It says, is it possible to host the PM in another region and connect to a different region
Is it possible? Uh once you created the BM with any uh with a certain uh proficiency
you can able to perform this action because everything as admin, you as admin and you can able to do that activities
So if you are a user, you can request your admin and you can able to process that
OK? Makes sense. Makes sense. OK? And the second question that only have is if a customer has production and test environment how to implement
a solution that each environment can connect to each other? I mean, is there any way we can do it because some people have different
environments and maybe they want to go at it and maybe sing a few things
Is it, is it possible? Yes, you have a, a gateways. How should a a gateways and you can able to set up as like
a normal outlet? Jason gateways, you can able to set up the upstream and downstream and how
what are the environments you want to connect and what are the environment you want to restrict
And so all this activity can be performed by means of API M management
OK. I hope that this answers to the question was asked a quick question
Monika, you did at the, at the very first place you did set up the stage where you clearly said that usually the administrative work
more on the portal and then comes the power shell and C
right. So, and you did also give an example of the moving from on premises to the database
I want to know that when and when most scenarios, one would go ahead and use power
I mean, um that, that is one example, I mean, in a day to day life
how often an administrator would use AC and a powershell. As the first question you asked
like you asked me to do in the different region. In this case
we need to do with the CL A because we need to change the the region
So for that, we cannot able to perform directly from your Azure portal
So that will require your AC L A command to get executed based on the region
And you need to allow the other availability, things, everything from your CLI or powershell commands
So that is based on any changes with the actual thing for a normal live things we can able to do for any changes for
any uh functionality which is not available in portal. For example, some of some of the functions will be directly automated from the portal and
some you need to write a code. So very rare cases, I'm I'm happy about that
Now, now here's a quick question that that is for for like channel, channel people
right? For, since it was an introduction se but where you also went on to go ahead and talk in depth about some of the
services uh m who, who can go ahead and, and try to
to be an Azure administrator. Is it going to be a fresher or is it going to be someone who is already working on Azure
So what should be the background and who should actually who's the ideal person to go ahead and get started with the administrator then
Yes, actually, as I said, those who are working in the infrastructure as well as the operating systems are the one who already have experience
with the Windows server or any other wars. So that is very easy for them to adapt
to assure they, what are they performing in on premise? They are going to perform the same in the Azure environment for a fresher or
from the experience from the other fields. Azur administration is quite easy when they are performing very small tasks
For example, what I'm saying, like hyper V and all it's an in depth concept for a simple VM I just need to create and
I want to learn from a learning objective that mean work is very easy
I can perform from the portal as a professional. It need a skills that need to support to further growth
For example, the infrastructure management is not easy, you are not experienced one
Yeah, but that definitely makes sense. I mean, if someone wants to go ahead and get started
they can definitely go ahead and do it. And when you go and join the team, they're definitely seniors who's going to help you out
with the migration and all that task. So if you want, you can go ahead and read the documentation
Micro has the documentation and also I see Micro has an A Z 4104 certifications with where you can also go ahead and do that
They have Microsoft Learn uh platform where they put an amazing content
So if someone wants to go ahead and get started, maybe as your fundamental certification or I should not
if not certification, maybe just because you can do it and maybe you can go ahead and get started with it
And if you join in any of the organization or a full time with that, maybe you can go ahead and
and learn more things a lot. I, I hope, I hope I was able to get what you said
So I think we're almost at time. We are at almost like 40/40 minutes
Any, any, anything you want to share, any last words or anything you want to share with us and we just wrap it up
Yes, as you said, like a lot of documentations available. Even uh we are working who are working in on premise
It's quite easy from 900 to 1 N 42 N four based on the skills what they are working
So that's quite easy for uh us to add up to any of the shoe services
So that's what my loss works in today's session. All right. All right
Monika. Thank you so much. That was a, that was a really nice session. I enjoyed listening it and guess what
I, I I'm, I'm definitely gonna take this exam because you really got me excited because this is something that I believe everyone should actually
know because uh because this is very fundamental and gives you a very good overview of the different services that as you provide
So, thank you so much for your time and I would really appreciate for all that you do for the community
And I Steven Simon, on behalf of entire C# community would like to thank you and
and uh we would love to have you back in the different conferences and live shows that we do
So. Thank you so much. Until then I'll keep on reading your articles on C# corner and uh hope to see you soon in next
virtual event or maybe in person. Thank you so much. Thank you
Thank you very much. Thank you. Thank you. Bye everyone