AZ-802 career: Windows Server admin roles
AZ-802 leads to Windows Server administration work: the person who runs domain controllers, Hyper-V hosts, file servers and the Azure Arc, Update Manager and Monitor tooling around them. Microsoft’s certification page tags the Windows Server Administrator Associate credential with seven roles at once (Administrator, Identity and Access Administrator, Information Protection and Compliance Administrator, Network Engineer, Security Engineer, Support Engineer and Technology Manager), which is more than most associate certifications carry. This page reads what that list does and does not mean for a job search. Whether the exam is worth the effort is covered in Is AZ-802 worth it?, and the validity rules are in renewal and retake rules.
Seven role tags, one real job
The tags look like a promise that one exam opens seven careers. They are better read as the places where Windows Server knowledge turns up, and the right-hand column below is this guide’s interpretation, not Microsoft’s. Microsoft’s own description of the AZ-802 candidate is narrower and more useful: someone responsible for deploying, implementing, managing and troubleshooting Windows Server as a workload on-premises, in the cloud or in a hybrid setup, who “typically collaborates with architects, administrators, and engineers”.
| Microsoft role tag | Where Windows Server work sits in it |
|---|---|
| Administrator | The core fit: server, domain and virtualisation operations |
| Identity and Access Administrator | AD DS, Group Policy, service accounts, trusts between forests |
| Network Engineer | DNS, DHCP and name resolution across a hybrid network |
| Security Engineer | Hardening domain controllers, Credential Guard, Defender for Servers |
| Support Engineer | Third-line troubleshooting: replication, Kerberos, secure channel faults |
| Information Protection and Compliance Administrator | BitLocker, file server resource management, access control on shares |
| Technology Manager | Knowing what the team is doing, rather than doing it daily |
Titles employers actually use include systems administrator, Windows server engineer, infrastructure engineer, Active Directory administrator, and support roles at managed service providers. These are common labels, not a Microsoft list. The US Bureau of Labor Statistics describes the nearby occupation, network and computer systems administrators, and notes that systems administrators usually focus on servers, software and user access. Its duties include adding users and assigning permissions, maintaining security, and diagnosing problems reported by users or monitoring. That page is also where to check pay and outlook; this site quotes no figures.
The old MCSA comparison, and where it breaks
Readers who remember Microsoft’s MCSA-era Windows Server certifications often ask whether this is the same thing. Two facts from Microsoft’s credential expiration policy matter. First, MCSA, MCSD and MCSE certifications do not expire. Second, the Windows Server Administrator Associate does: associate certifications are valid for one year from the day all requirements are met. A decade-old MCSA line on a CV therefore says something different from a current AZ-802 badge. One shows history; the other shows you passed or renewed within the past year.
The content differs too. The AZ-802 outline is organised around hybrid tooling (Azure Arc-enabled servers, Azure Update Manager, Azure Automation runbooks, Windows Admin Center in the Azure portal) next to classic subjects such as FSMO roles, RODCs, DFS and DHCP failover. The comparison with AZ-800 and AZ-801 lists what was dropped, including clustering as a domain of its own.
Reading the certification page and the exam page together
Microsoft’s two pages currently tell slightly different stories, and it helps to know which one describes the exam you sit. The exam page for AZ-802 lists seven skill areas and states a retirement date of “none”. The certification page still carries the older wording: “several years of experience with Windows Server operating systems”, a mention of migrating workloads to Azure, and a list of ten assessed areas that includes high availability, disaster recovery and migration. The AZ-802 outline no longer tests those three as separate areas. If you meet a job advert that asks for clustering or backup design, treat that as extra on-the-job knowledge the badge does not guarantee.
Experience the exam assumes
Microsoft names no prerequisite certification. The audience profile expects experience administering Windows Server with Windows Admin Center, Hyper-V, PowerShell, Azure Arc, Azure Monitor, Azure Update Manager and Microsoft Defender for Cloud, plus familiarity with AD DS. Typical starting points are a help desk or desktop support person who has begun to touch servers, or an on-premises sysadmin moving into hybrid work. A complete newcomer to cloud terminology may want AZ-900 first; it never expires.
What the AZ-802 badge does not prove
- Cloud-platform administration. Azure VMs are covered, but subscriptions, governance, storage accounts and Entra ID at scale belong to AZ-104.
- Migration and recovery design. Storage Migration Service, Azure Migrate, Azure Backup and Site Recovery are not in the AZ-802 outline.
- Hybrid identity synchronisation. Microsoft Entra Connect and Cloud Sync were dropped from this exam.
- Architecture. Choosing between designs is the work of AZ-305.
- Security specialisation. Hardening is one domain of seven; a security career is built on SC-500 or SC-300.
What usually comes after AZ-802
Most holders go in one of three directions. Sideways into Azure administration with AZ-104, which is the natural companion because AZ-802 stops at the Windows Server VM. Up through the architect track in the Azure administrator and architect path. Or across into identity or security using the Microsoft security path. The broader skills outline shows how these fit together, and certification costs helps plan what to take in which order.