What identity and access topics are included in AZ-500?

Identity and access is covered as a dedicated module in AZ-500, reflecting how access control is central to cloud security. The module is framed around modern security posture principles, including the idea of assuming breach and using a Zero Trust model, where access must be managed consistently regardless of where requests originate.The program topics listed include configuring Azure AD Privileged Identity Management (PIM). PIM is commonly used to manage privileged roles and reduce standing administrative access by enabling controlled, time-bound elevation. Understanding this capability helps security engineers reduce risk associated with long-lived permissions.The module also includes configuring and managing Azure Key Vault. Key Vault is used for managing secrets, keys, and related sensitive material, which is closely tied to both identity and application security controls. Managing Key Vault correctly is a practical requirement in many environments where credentials and encryption keys must be protected and audited.Another topic listed is configuring Azure AD for Azure workloads. This points to workload identity considerations, where applications and services need secure identity integration for access to resources. Security engineers often need to ensure that workloads follow least privilege and that identity configuration supports secure access patterns.Finally, the module references security for an Azure subscription. Subscription-level security includes governance and access boundaries that define how resources are controlled, and it influences what identity and access configurations are possible and enforceable.In combination, these identity and access topics aim to equip you with the controls needed to manage privileged access, protect secrets and keys, and ensure that both users and workloads authenticate and authorize safely in Azure.