AZ-104 career: roles and next steps

AZ-104 leads to Azure administrator work: the person who keeps an organization’s Azure subscriptions, networks, storage, virtual machines and identities running. Microsoft files the Azure Administrator Associate credential under the single role tag “Administrator” at the “Intermediate” level, and it is the only entry-level-to-expert bridge on the Azure infrastructure track, because the Azure Solutions Architect Expert credential cannot be earned without it. This page covers the jobs the badge points at, the limits of what it shows, and the exams that usually follow. Whether to take it at all is covered in Is AZ-104 worth it?.

The role Microsoft wrote the exam for

Microsoft’s certification page describes the candidate as someone with subject matter expertise in implementing, managing and monitoring an organization’s Azure environment, covering virtual networks, storage, compute, identity, security and governance. It adds that an Azure administrator often serves as part of a larger team that builds the cloud infrastructure, and coordinates with the roles that deliver networking, security, database, application development and DevOps solutions.

That wording matters for job hunting. It places the administrator in the middle of a team rather than at the top of it, so the titles that fit are the ones where you operate a platform other people build on:

• Azure administrator or cloud administrator
• Cloud operations engineer
• Systems administrator or systems engineer with Azure in scope
• Infrastructure engineer on a platform or landing-zone team
• Support engineer or technical account role at a managed service provider or Microsoft partner

Job titles vary by employer and these are common labels, not a Microsoft-defined list. Microsoft itself publishes one role tag for this credential, and nothing more granular.

The US Bureau of Labor Statistics describes the neighbouring occupation, network and computer systems administrators, as people who install, configure and maintain networks and systems, add users and assign permissions, maintain security, and diagnose problems reported by users or monitoring. Its duties list reads like the AZ-104 domains moved to the cloud. The same page is the place to look for current pay and outlook figures; this site quotes none, because they are national averages that say little about your market.

Who it suits, going by the stated prerequisites

Microsoft does not require another certification before AZ-104. It does list what you should be familiar with: operating systems, networking, servers and virtualization. It also lists hands-on experience with PowerShell, Azure CLI, the Azure portal, Azure Resource Manager templates or Bicep files, and Microsoft Entra ID.

Read that as a description of two common starting points. One is the on-premises administrator who already runs Windows Server, Active Directory and virtual machines, and needs the Azure equivalents. The other is a help desk or junior sysadmin who has used Azure in a lab and wants a credential that proves it. Someone with neither Azure nor infrastructure experience may prefer to begin with AZ-900, which has no expiry, and then return.

What the AZ-104 badge does not prove

• Design judgement. The exam asks you to configure a requirement correctly. Choosing between three architectures for a business that has not yet said what it needs is the job of the architect exam, AZ-305.
• Delivery pipelines. Microsoft’s administrator description stops at coordinating with DevOps. Building CI/CD with GitHub or Azure DevOps belongs to AZ-400.
• Windows Server depth. Active Directory Domain Services and hybrid file services are in AZ-802, not here.
• Security engineering. Identity is a domain, but threat protection and cloud-security design sit in SC-500 and in the identity specialty SC-300.
• Currency. The credential expires after twelve months unless renewed, so a badge on a CV is only as current as its expiry date. Details are in renewal and retake rules.

The next rung, depending on where you want to go

The decision usually comes down to what you enjoy in the first year of the job. If you find yourself writing Bicep and reviewing designs, AZ-305 follows naturally; AZ-104 vs AZ-305 shows where the two exams diverge. If you spend your time on pipelines and automation, AZ-400 is the better bet. The Azure administrator and architect path lays the sequence out in one place.

Microsoft’s DevOps page still names the Azure Developer Associate as an alternative prerequisite, so check that page for the current wording when you plan, since the Azure certification lineup shifts between releases.

A practical way to use the credential

Pair the badge with something visible. A small environment deployed from Bicep files, a policy-and-RBAC setup you can explain, or a documented backup and recovery test says more in an interview than a certificate alone. If you are weighing which exam to pay for next, the certification costs overview shows what each vendor charges and where renewal is free. Because AZ-104 renews at no cost, keeping it active is cheaper than re-earning it, which is worth planning for before you start the next exam.