Skip to content
Rolevara

Hands-on

Practise Microsoft Entra ID, Okta and AWS IAM in a free tenant

Employers want hands-on time in the identity platforms they run. This guide covers how to get a free practice environment for each, and what to practise once you have one.

Updated 2026-10-02

Free practice environments

  • Microsoft Entra ID: an Azure free account or a Microsoft 365 developer tenant.
  • Okta: a free Okta Integrator org.
  • AWS IAM: a free-tier AWS account, ideally with a budget alert set before you start.

What to practise

  • Joiner, mover, leaver and rehire changes in a real directory.
  • Disabling accounts and revoking sessions for a leaver.
  • Group-based access that matches the role, provisioned from an access matrix.
  • Least-privilege tokens and read-only access for checks and reporting.
  • Scripting the changes safely: PowerShell with Microsoft Graph, or CloudFormation for AWS.

Rolevara platform labs

Rolevara platform labs (early access, part of Pro + Labs) seed your own free tenant with the fictional Pacific Crest directory. You work the tickets in the real Entra admin center, Okta Admin Console or AWS IAM console, then a read-only check grades your work ticket by ticket. Each lab also produces a GitHub portfolio project.

The labs are optional. The simulator itself runs in the browser and needs no tenant.

Practise it on a realistic job

See what each lab covers, and how the grading works.

Explore the labs

Questions

Can you practise Microsoft Entra ID for free?

Yes. An Azure free account or a Microsoft 365 developer tenant gives you an Entra ID directory to practise in.

Which certification matches Entra ID practice?

Microsoft SC-300 (Identity and Access Administrator) covers Entra ID administration.

Do the Rolevara labs need paid licences?

No. Each lab runs in a free tenant or free-tier account you own.

More guides

Early access

Be first to try new companies and labs.

Get one email each time a new company, track or platform lab is released. No payment details needed.