Free practice environments
- Microsoft Entra ID: an Azure free account or a Microsoft 365 developer tenant.
- Okta: a free Okta Integrator org.
- AWS IAM: a free-tier AWS account, ideally with a budget alert set before you start.
What to practise
- Joiner, mover, leaver and rehire changes in a real directory.
- Disabling accounts and revoking sessions for a leaver.
- Group-based access that matches the role, provisioned from an access matrix.
- Least-privilege tokens and read-only access for checks and reporting.
- Scripting the changes safely: PowerShell with Microsoft Graph, or CloudFormation for AWS.
Rolevara platform labs
Rolevara platform labs (early access, part of Pro + Labs) seed your own free tenant with the fictional Pacific Crest directory. You work the tickets in the real Entra admin center, Okta Admin Console or AWS IAM console, then a read-only check grades your work ticket by ticket. Each lab also produces a GitHub portfolio project.
The labs are optional. The simulator itself runs in the browser and needs no tenant.
Practise it on a realistic job
See what each lab covers, and how the grading works.
Explore the labsQuestions
Can you practise Microsoft Entra ID for free?
Yes. An Azure free account or a Microsoft 365 developer tenant gives you an Entra ID directory to practise in.
Which certification matches Entra ID practice?
Microsoft SC-300 (Identity and Access Administrator) covers Entra ID administration.
Do the Rolevara labs need paid licences?
No. Each lab runs in a free tenant or free-tier account you own.

