Learn Azure administration for free

What it is

Azure administration is the practical skill of configuring, governing, monitoring, securing, and operating resources in Microsoft Azure. It is the day-to-day operations layer of the cloud: managing identities and access with Microsoft Entra ID, organizing resources into subscriptions and resource groups, deploying and running virtual machines and storage, drawing virtual networks with subnets and network security groups, and keeping an eye on cost and health. Because Azure is one of the most widely used enterprise clouds and these operational tasks recur across nearly every deployment, the skill is broadly transferable — the same identity, resource-organization, networking, and monitoring habits carry across cloud-administration, cloud-engineering, systems-administration, and hybrid-infrastructure work, and much of the operational mental model transfers to other cloud platforms even though the names differ.

The skill breaks into a handful of durable areas. Identity and access: managing users and groups in Microsoft Entra ID and assigning role-based access control (RBAC) with least privilege so people get only the permissions a task needs. Governance and structure: organizing workloads into subscriptions and resource groups so cost, access, and lifecycle stay manageable, and using tags and policies to keep an environment tidy. Compute and storage: creating, sizing, starting, and stopping virtual machines and provisioning storage accounts without over-provisioning. Networking: building virtual networks, subnets, and network security groups that allow only intended traffic. Monitoring and cost: reading Azure Monitor and the cost-management views to see what a resource is doing and what it is costing. None of these are memorization drills — they are habits you build by creating and operating small real resources you can safely delete.

The fastest way to get fluent without spending money is to work inside your own free Azure account: use the always-free services and the introductory credit to stand up a small resource, operate it, read its cost and health, and delete it. Treat Microsoft Learn and the official Azure documentation as your primary reference rather than following steps you do not understand, and keep everything inside one clearly named resource group so cleanup is a single action. This primer sequences the free resources and gives you a first hands-on exercise; the resources below are the authoritative places to go deeper. The most important operational habit is disciplined cleanup — delete resource groups (and any monitoring workspace) before your trial ends, and never leave a virtual machine running, because credit is finite and some services bill once free limits are exceeded.

Why it matters

Azure administration shows up across cloud-administration, cloud-engineering, systems-administration, and hybrid-infrastructure roles because Azure is one of the most widely used enterprise clouds and nearly every deployment needs identity, resource organization, networking, monitoring, and cost management. It is a foundational operations skill that several Microsoft certifications test directly, and the operational reasoning transfers between environments and — in large part — between cloud providers rather than tying you to one portal.

The free path, in order

1. Create your own free Azure account. Sign up for your own free Azure account (never a work or school tenant), which includes an introductory credit for the first 30 days plus a set of always-free services. Review the free-account terms so you know your cost boundary before creating anything.
2. Learn identity, RBAC, and least privilege. Use Microsoft Learn's free AZ-104 paths to understand Microsoft Entra ID users and groups and role-based access control. Practice granting only the permissions a task needs rather than broad access.
3. Organize with subscriptions and resource groups. Learn how subscriptions and resource groups structure an environment for cost, access, and lifecycle. Put every hands-on resource in one clearly named resource group so cleanup is a single, reliable action.
4. Deploy and operate compute, storage, and networking. Create a small virtual machine and a storage account, and build a virtual network with a network security group that allows only intended traffic. Practice starting, stopping, and right-sizing rather than leaving resources running.
5. Monitor cost and health. Read Azure Monitor and Cost Management to see what a resource is doing and what it is costing. Confirm your usage stays within your credit and free-service limits, and note anything that would bill beyond them.
6. Tear down before the trial expires. Delete the resource group and any Log Analytics workspace or monitoring resource you created, and stop any remaining virtual machine, before your trial ends. Disciplined teardown is part of the skill because credit is finite.

Best free resources

• Microsoft Learn — AZ-104 Azure Administrator training OfficialOfficial free training

  Microsoft's own free, structured learning paths for Azure administration with hands-on modules covering identity, governance, compute, networking, and monitoring — the authoritative starting point, kept current by the vendor.

• Microsoft Learn — Training catalog OfficialOfficial free training

  The full free Microsoft Learn catalog, where you can find additional Azure fundamentals and administration paths and self-paced modules beyond the AZ-104 track.

• Azure documentation (service reference) OfficialOfficial documentation

  The canonical free reference for every Azure service's behavior, limits, and configuration — the source of truth you check instead of trusting a walkthrough you do not fully understand.

• Create an Azure free account (Microsoft Learn — credit and free services) OfficialOfficial documentation

  Microsoft's official documentation of the free Azure account: a $200 credit for the first 30 days, a set of services free for 12 months, and always-free services — essential for planning hands-on practice that stays free, since services bill once credit or free limits are exceeded.

• freeCodeCamp — Azure courses and articles Vetted communityFree articles and videos (supplemental)

  A free, nonprofit library of Azure explainers and full-length course videos, useful as a second explanation of Azure services and administration workflows alongside the official docs — a supplement, not the authoritative reference.

Every resource is free and dated. Official sources are labeled; vetted community resources are labeled separately. Verify a resource is still free on its own page before relying on it.

Try it (free, safe, hands-on)

Stand up, operate, and tear down a resource group on your own free account

Do the core Azure-administration actions on a free account you own: organize a resource group, deploy and operate a small virtual machine and storage, apply least-privilege RBAC, read cost and health, and delete everything before the trial expires — the daily loop of cloud operations.

You will need: Your own free Azure account (never a work or school tenant), created with its introductory credit and always-free services; The Azure portal in a web browser (free to access); A note file to record what you created so cleanup is complete

1. Create one clearly named resource group (for example 'lab-rg') so every resource you make lives in a single place and can be deleted in one action later. Record the name.
2. Deploy a small virtual machine into that resource group using the smallest eligible size, plus a storage account. Start it, confirm you can reach it, then stop (deallocate) it so it does not keep consuming credit while idle.
3. Apply least-privilege access: in Access control (IAM) on the resource group, assign a scoped role (for example Reader) to a test group rather than granting broad subscription-wide rights. Confirm the assignment is limited to that resource group.
4. Build a small virtual network with a subnet and a network security group whose inbound rules allow only the traffic you intend, and note how the rules shape access.
5. Open Azure Monitor and Cost Management and read what your resources are doing and costing. Confirm your usage is inside your credit and free-service limits and note anything that would bill beyond them.
6. Tear everything down: delete the resource group (which removes the VM, storage, network, and any Log Analytics workspace inside it), confirm no virtual machine is left running, and re-check Cost Management so nothing keeps billing before your trial ends.

What you should see: A resource group you created and organized, a virtual machine and storage you deployed and operated, an RBAC assignment scoped to least privilege, a network security group that allows only intended traffic, a cost view confirming you stayed within free limits, and a complete teardown — all on a free account you own, produced by actions you performed yourself.

Safety: Do this only on your own free Azure trial account — never a work or school tenant. Never leave a virtual machine running; stop or delete resources when done. Delete the resource group and any Log Analytics workspace you create before the trial expires, because credit is finite and services bill once free limits are exceeded.

Where this skill gets used

Certifications that test it: microsoft-az-104, microsoft-az-900, microsoft-security-compliance-and-identity-fundamentals, microsoft-security-operations-analyst-associate.

Roles that need it: Cloud administrator, Cloud engineer, Systems administrator, Infrastructure engineer.

Sources

• Microsoft Learn — AZ-104 Azure Administrator training (as of 2026-07-11)
• Microsoft Learn — Training catalog (as of 2026-07-11)
• Azure documentation (as of 2026-07-11)
• Create an Azure free account (Microsoft Learn) (as of 2026-07-11)

Every resource is free and dated; official-first, community clearly labeled. A skill primer is a free learning path, not a certification, not professional experience, and not a job or salary guarantee. Labs run only on your own free Azure account within credit and free-service limits, with full teardown of resource groups and monitoring workspaces before the trial expires. Born draft, pending human review.

All skill primers