Dit deel is nog niet vertaald. Je ziet de Engelse tekst.
$ als gewone gebruiker# als root (of met sudo)
Know the hierarchy of Azure
Azure resources live in a tree: management groups → subscriptions → resource groups → resources. Rights, policies and costs flow down this tree.
| Level | What it is | Example |
|---|---|---|
| Microsoft Entra tenant | The identity directory of the company | contoso.onmicrosoft.com |
| Management group | A folder of subscriptions, for policies and access | mg-production |
| Subscription | A billing and limit boundary | sub-prod, sub-dev |
| Resource group | A folder of resources with the same life cycle | rg-web-prod |
| Resource | One service instance | A VM, a storage account, a VNet |
Onthoud
A resource is in exactly one resource group. Delete the group and you delete everything in it.
Choose regions and zones
A region is a set of data centres in one area. Availability zones are separate buildings inside a region. Region pairs back each other up.
| Choice | Protects against | Example |
|---|---|---|
| One zone | Nothing beyond the server | A test VM |
| Zone-redundant | Loss of one data centre | VMs in zones 1, 2 and 3 behind a load balancer |
| Two regions | Loss of a whole region | Site Recovery to the paired region |
Op het werk
Pick the region near your users and check that every service you need is available there (not every service is in every region).
Use the Azure portal
portal.azure.com is the web interface. Good to explore and learn; bad for repeatable work.
- Search bar on top: find any service or resource by name.
- Resource groups, All resources, Cost Management, Microsoft Entra ID are the pages you use every day.
- Every create page has Review + create, and often Download a template for automation — the start of Infrastructure as Code.
Use Azure CLI
az works on Linux, macOS and Windows, and in scripts. The pattern is az GROUP COMMAND --options.
az login
az login --use-device-code
az account list --output table
az account set --subscription "sub-dev"
az group create --name rg-lab --location westeurope
az resource list --resource-group rg-lab --output table
az vm list -d --query "[].{name:name, state:powerState, ip:publicIps}" -o table
az group delete --name rg-lab --yes --no-wait| Option | Meaning |
|---|---|
--output table / json / tsv | Output format |
--query JMESPATH | Pick fields from the JSON answer |
--help / -h | Help for any group or command |
az find "create vm" | Search examples |
Use Azure PowerShell and Cloud Shell
The Az PowerShell module does the same work with verb-noun commands. Cloud Shell is a browser shell with both tools already logged in.
Connect-AzAccount
Get-AzSubscription
Set-AzContext -Subscription "sub-dev"
New-AzResourceGroup -Name rg-lab -Location westeurope
Get-AzVM -ResourceGroupName rg-lab | Select-Object Name, Location
Remove-AzResourceGroup -Name rg-lab -Force- Open Cloud Shell from the
>_icon in the portal; choose Bash or PowerShell. - Cloud Shell can keep files in an Azure Files share (
clouddrive).
Examentip
The exam shows commands in both CLI and PowerShell. Learn to read both: az vm create = New-AzVM, az group delete = Remove-AzResourceGroup.
Understand limits and quotas
Every subscription has limits (for example vCPUs per region). A deployment fails when it would go over them.