Azure Attribute-Based Access Control, in preview, allows authorizing certain Azure activity at a more detailed level than has been possible.

Sidebar summarizes on-premises and Azure-hosted directory services.

Windows 10 hybrid domain join offers organizations the traditional benefits of AD, like Group Policy, with additional benefits from registering PCs with Azure Active Directory.

Illustration shows a screen shot of Azure RBAC “Check access” tools in the Azure portal.

Azure provides a role-based access control (RBAC) system that allows customers to secure access to Azure deployments.

Azure Active Directory Domain Services offers most on-premises AD functionality for use within Azure

Chart shows Microsoft-hosted identity infrastructure components

Azure Active Directory Domain Services offers most on-premises AD functionality for use within Azure

Organizations using Microsoft's Active Directory Domain Services need to understand the difference between Active Directory and Microsoft's hosted Azure Active Directory

The emphasis of Microsoft's identity management technologies moving forward is increasingly focused on user management and mobility, delivered through hosted services