Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Everything you need to know about the Microsoft Certified: Azure Administrator Associate, the most popular role-based Azure certification, as of 2026. This guide covers the AZ-104 exam, the five domains and their weights, the format and passing score, the annual free renewal, DoD 8140 status, and the cloud roles it opens.
Microsoft Entra ID, role-based access control, subscriptions, and Azure Policy. 20 to 25%.
Storage accounts, blob and file storage, access control, and lifecycle management. 15 to 20%.
Virtual machines, containers, App Service, and ARM template and Bicep automation. 20 to 25%.
Virtual networks, network security groups, load balancing, DNS, and connectivity. 15 to 20%.
Azure Monitor, Network Watcher, and backup and recovery. The smallest domain at 10 to 15%.
The Microsoft Certified: Azure Administrator Associate, earned through exam AZ-104, is Microsoft's role-based certification for the people who run Azure environments day to day, and the most popular role-based Azure exam.
Unlike a fundamentals credential that tests vocabulary, AZ-104 validates that you can actually operate Azure: secure identities with Microsoft Entra ID, deploy and manage compute, configure virtual networks, manage storage, and monitor it all. Microsoft certifies you on the job, not the product, so the exam is written around what an Azure administrator does on a Tuesday morning.
AZ-104 carries no formal prerequisites, though Microsoft recommends about six months of hands-on experience. It is issued and maintained by Microsoft, and the skills-measured outline was last updated on April 17, 2026.
Four things that make the Azure Administrator the credential employers name first for a Microsoft-cloud hire in 2026.
Azure is the second-largest cloud and dominates Microsoft-heavy, enterprise, and regulated environments. AZ-104 is its most popular role-based exam, the one most cloud administration and cloud operations job listings name, and the foundation the rest of the Azure path builds on.
AZ-104 does not test vocabulary. Through case studies and scenario questions, it checks whether you can actually run an Azure environment, from Entra ID and RBAC to compute, networking, and monitoring. Employers treat it as evidence you can do the work, not just describe it.
AZ-104 is the base for the Solutions Architect, DevOps, and Security tracks, and a hard prerequisite for AZ-305. Our guide to starting with AZ-900 or AZ-104 covers where to begin.
AZ-104 is valid for one year and renews free through a short online assessment on Microsoft Learn, a lighter, cheaper maintenance model than the multi-year paid cycles of most certifications. It is not a DoD 8140 credential and does not appear in the Qualification Matrix V2.1.
Its weight is market-driven instead. Azure dominates enterprise and government cloud, including Azure Government, so agencies and contractors routinely require Azure certifications for cloud roles even though they sit outside the 8140 matrix.
Everything you need to know about the certification, the AZ-104 exam, and how to maintain it as of 2026.
AZ-104 is the foundation of the Azure role-based path. From here, most administrators move up into architecture, add DevOps, or specialize in security. The three below are the common next steps.
The move from operating Azure to designing it. AZ-305 tests end-to-end infrastructure design across identity, storage, business continuity, and networking. It requires an active AZ-104, so the Administrator is the direct on-ramp to the Expert credential.
The move toward automation and delivery. AZ-400 covers CI/CD pipelines, infrastructure as code, and release management on Azure. The AZ-104 grounding in ARM templates and Bicep makes the DevOps material far more approachable.
The specialize move for security-focused admins. AZ-500 goes deep on identity and access, platform protection, security operations, and data security on Azure. The identity and networking work in AZ-104 is the natural lead-in.
AZ-104 sits at the associate tier of Microsoft's role-based Azure path. It builds on the foundational AZ-900, and from there the path branches into architecture, DevOps, and security.
The cloud groundwork
The Azure operations anchor
Pick your path
Two questions to answer before you commit: can you sit it, and should you pursue AZ-104 specifically. Here's a straight answer to both.
No prerequisite credential required.
AZ-104 has no formal prerequisites, and AZ-900 is recommended but not required. You can register and take it directly through Pearson VUE or online proctoring. That open door makes it a realistic first Azure certification for anyone with some IT background.
You cannot click your way through blind.
Microsoft recommends about six months of hands-on experience, and the exam rewards it. The case studies and command-identification questions assume you have worked in the portal and with the CLI. Use the Azure free tier to deploy real resources as you study, because reading alone tends to stall on the scenario questions.
AZ-104 maps to the Azure administration and cloud operations roles organizations are hiring for as they run and expand their Microsoft cloud footprint.
The flagship destination for an AZ-104 holder. Implements, manages, and monitors an organization's Azure environment across identity, storage, compute, networking, and governance.
Runs the day-to-day cloud operations for a business on Azure, keeping subscriptions, resources, access, and costs under control across teams and environments.
Builds and maintains the core Azure infrastructure layer, from virtual networks and identity to the automation that provisions and scales resources reliably.
Designs and operates cloud solutions on Azure, translating requirements into deployed, secured, and monitored infrastructure. AZ-104 is the credential this role most often lists.
The classic on-premises admin moving into the cloud. AZ-104 is the natural bridge, validating the Azure skills that traditional Windows and server experience translates into.
Diagnoses and resolves issues across Azure services for internal teams or customers. The breadth of AZ-104 maps closely to the range of problems a support engineer sees.
AZ-104 sits between the foundational AZ-900 and the expert-level AZ-305. Here's how the three line up, including Microsoft's distinctive renewal model.
| Azure Administrator (AZ-104) | Azure Fundamentals (AZ-900) | Solutions Architect (AZ-305) | |
|---|---|---|---|
| Issuer | Microsoft | Microsoft | Microsoft |
| Level | Associate | Foundational | Expert |
| Focus | Operating Azure environments | Cloud concepts and Azure basics | Designing Azure solutions |
| Prerequisites | None (rec. 6 months) | None | AZ-104 required for the credential |
| Exam | 40 to 60 items, 100 min | 40 to 60 items, 45 min | 40 to 60 items, 120 min |
| Passing Score | 700 of 1000 | 700 of 1000 | 700 of 1000 |
| Cost | $165 | $99 | $165 |
| Validity | 1 year, free renewal | Does not expire | 1 year, free renewal |
| Best For | Cloud administrators | Beginners and non-technical roles | Cloud and solutions architects |
Pricing varies by region and taxes. None of the Azure certifications appear on the DoD 8140 Matrix; their recognition is market-driven rather than DoD-listed. Fundamentals certifications do not expire, while associate and expert credentials renew free each year.
As an authorized Microsoft training partner, our Azure Administrator boot camp covers all five AZ-104 domains over four days, with hands-on Azure labs, official Microsoft courseware, your exam voucher, and a free retake included, so you leave exam-ready.
Where to start, how Azure compares to AWS, and the certifications that come after AZ-104.
The most common Azure question answered honestly. When the Fundamentals cert pays off first and when to go straight to the Administrator, based on where you are starting from.
The full Microsoft map, from fundamentals through the associate and expert tiers, showing where AZ-104 sits and how the role-based structure sequences toward AZ-305 and beyond.
The multi-cloud math for professionals weighing Azure against AWS. How the markets compare, where Azure dominates, and what dual-platform skills add to salary and mobility.
Market context for the Azure choice: which enterprises run Azure, where it dominates against AWS, and why Microsoft-heavy and regulated environments make AZ-104 particularly practical.
Legitimate ways to cut the cost of your first Azure exam to zero, from Microsoft Virtual Training Days to other programs, before you move up toward the Administrator credential.
How Microsoft's role-based structure replaced the old MCSA model, what the fundamentals, associate, and expert tiers mean, and how systems administration paths now point toward AZ-104.
Why cloud administration is a high-payoff move for traditional IT professionals, how existing skills translate to Azure, and where the AZ-104 fits a mid-career pivot.
The AZ-104 exam is organized into five domains, each carrying its own weight. Identity and compute are the heaviest at 20 to 25 percent each. Click any domain for what it covers.
Managing Microsoft Entra ID users and groups, role-based access control, subscriptions and management groups, and Azure Policy. The identity and governance layer that everything else in an Azure environment builds on.
Configuring storage accounts, blob and file storage, access control and lifecycle management, and securing and monitoring the data layer across an Azure subscription.
Deploying and managing virtual machines, containers with Azure Container Apps, and App Service, plus the ARM templates and Bicep files that automate compute provisioning.
Configuring virtual networks, network security groups, load balancing, DNS, and connectivity including Azure Bastion and Network Watcher, the networking backbone of an Azure environment.
Monitoring with Azure Monitor and Network Watcher, configuring backup and recovery, and maintaining the health and performance of Azure resources over time.
Domains and weights reflect the Microsoft AZ-104 skills-measured outline last updated April 17, 2026. Microsoft refreshes role-based exams periodically, so confirm the current outline on Microsoft Learn before scheduling.
The questions candidates ask most often when researching the Microsoft Azure Administrator certification.
The Microsoft Certified: Azure Administrator Associate, earned by passing exam AZ-104, is Microsoft's role-based certification for the people who implement, manage, and monitor an organization's Azure environment. It covers identity, governance, storage, compute, virtual networking, and monitoring, and it's the most popular role-based Azure exam.
The current exam is AZ-104. Microsoft last updated the skills-measured outline on April 17, 2026, adding more Microsoft Entra ID, Azure Container Apps, and Azure Arc content, and adjusting the domain weights. The exam has fully adopted Microsoft Entra ID naming, the rebranded name for Azure Active Directory.
No. AZ-104 has no formal prerequisites, so anyone can register and sit the exam. Microsoft recommends about six months of hands-on Azure administration experience, and familiarity with the fundamentals covered by AZ-900 helps, but neither is required to take AZ-104.
The five domains are Manage Azure identities and governance (20 to 25 percent), Implement and manage storage (15 to 20 percent), Deploy and manage Azure compute resources (20 to 25 percent), Configure and manage virtual networking (15 to 20 percent), and Monitor and maintain Azure resources (10 to 15 percent). Identity and compute carry the most weight.
AZ-104 typically has 40 to 60 questions, and the exact count varies by session. Formats include multiple choice, case studies, and drag-and-drop, and case studies are multi-question scenarios that count toward the total. You have 100 minutes to complete the exam.
You need 700 on a scale of 100 to 1000 to pass. Microsoft uses scaled scoring, so 700 does not mean 70 percent correct. Some questions carry more weight than others, and case studies often count for multiple points, so the passing line reflects overall performance rather than a straight percentage.
The AZ-104 exam costs $165 USD, with small variations by region and local taxes, scheduled through Pearson VUE. Training Camp's Azure Administrator boot camp includes the exam voucher in the program fee, along with a free retake.
No. Microsoft Azure certifications don't appear on the DoD 8140 Approved Qualifications Matrix V2.1, so AZ-104 on its own won't satisfy a cyber-coded position requirement. That said, Azure certifications are widely required for cloud roles across enterprise and government, since Azure dominates Microsoft-heavy and regulated environments including Azure Government. See the full DoD 8140 work role paths.
AZ-104 is a role-based associate certification and is valid for one year. Microsoft lets you renew it free through a short, unproctored online assessment on Microsoft Learn. The renewal window opens six months before your expiration date, and you can retake the assessment as many times as needed until you pass, at no cost.
AZ-104 maps to roles such as Azure Administrator, Cloud Administrator, Azure Infrastructure Engineer, Cloud Engineer, Systems Administrator moving into the cloud, and Cloud Support Engineer. Most cloud administration and cloud operations job listings name AZ-104 as preferred or required.
If you have some IT or Azure experience, go straight to AZ-104, which carries real career weight and maps to actual admin jobs. If you're new to the cloud, AZ-900 Fundamentals first builds the vocabulary and concepts that make AZ-104 far easier to absorb. AZ-900 is not required for AZ-104, so it's a matter of your starting point, not a gate.
AZ-104 is a genuine associate-level exam that rewards hands-on experience. The difficulty is that it tests whether you can actually run an Azure environment, not just define terms, with case studies, drag-and-drop sequencing, and command identification. Most candidates need eight to twelve weeks of study, and time in a real Azure portal makes the biggest difference.
For anyone working with or moving into Azure, yes. Azure is the second-largest cloud and dominant in enterprise and Microsoft-heavy environments, AZ-104 is the credential those employers name most for cloud administration, and it's the foundation for the AZ-305, AZ-400, and AZ-500 paths. It's less essential for those who only need cloud literacy, where AZ-900 is the lighter fit.
Whether you're weighing the certification, planning the Azure path, or arranging cloud training for a team, tell us where you are and we'll help you map out the right path.