This module provides practice applying HIPAA-compliant handling of protected health information across storage, access, sharing, and workflow automation in Microsoft Cloud for Healthcare. Learners will be able to make correct handling decisions using the Minimum Necessary Standard, audit requirements, and Privacy Rule disclosure rules when presented with realistic healthcare scenarios. Every person who touches healthcare data makes these decisions daily—getting them wrong triggers compliance investigations.

This module introduces core information privacy principles—consent, minimum necessary use, purpose limitation, appropriate disclosure, data minimization, accountability and auditability, and de-identification—as they apply to patient and operational data in Microsoft Cloud for Healthcare. Learners will be able to explain how privacy principles govern data handling beyond HIPAA compliance, including how tools like Microsoft Purview support data classification and protection. Privacy awareness is a baseline expectation for any role that views, shares, or processes patient information.

This module provides practice applying privacy principles to specific healthcare data tasks: viewing records, exporting data, sending messages, and collaborating with colleagues in Microsoft Cloud for Healthcare. Learners will be able to make correct privacy decisions during routine administrative activities using the consent, minimum necessary, purpose limitation, and disclosure principles. These are the exact handling decisions entry-level staff make dozens of times per day; each one either protects or risks patient privacy.

This module introduces identity and access management fundamentals, such as user identity, authentication, role-based access control, and least-privilege principles, as applied to Microsoft Cloud for Healthcare environments. You will be able to explain how authenticated identities receive access to healthcare data and applications based on job role and approved permissions using Microsoft Entra ID. Every access control decision either protects or exposes patient data. Understanding identity and access management helps entry-level staff ensure the right people access the right information.

This module provides practice performing role-based access reviews for healthcare administration user scenarios, such as evaluating user/role matrices, identifying inappropriate permissions, and recommending least-privilege adjustments using Microsoft Entra ID access patterns. You will be able to complete a structured access review for multiple healthcare users and document findings with recommended changes. Access reviews are a recurring compliance requirement; entry-level staff often perform the initial review before senior staff approve changes.

This module provides hands-on practice managing users and groups in Microsoft Entra ID via Virtual Browser: creating healthcare access groups, adding users, assigning membership, and verifying provisioning. Learners will be able to use Microsoft Entra ID to create users, build healthcare-specific groups, and confirm that access provisioning is complete. User and group management is the most common directory task for entry-level healthcare IT staff; every new hire, transfer, and access request starts here.

This module builds troubleshooting skills for diagnosing common healthcare access issues using Microsoft Entra ID sign-in logs, group membership status, role assignments, account status, and directory information in Microsoft Entra ID. Learners will be able to identify whether an access problem is caused by account state, missing group assignment, or sign-in condition by examining directory details. When healthcare staff can't access their systems, entry-level IT is the first call; this module teaches the investigative process.

This project integrates skills from across courses on HIPAA compliance evaluation, privacy-aware handling decisions, role-based access reviews, and directory troubleshooting into a comprehensive healthcare compliance and access assessment. Learners will be able to evaluate a healthcare organization scenario for HIPAA alignment, privacy violations, access control gaps, and directory configuration issues using Microsoft Purview, Microsoft Entra ID, and Microsoft Cloud for Healthcare as reference context, producing a documented review with prioritized remediation recommendations. Compliance and access audits are recurring organizational requirements; this deliverable mirrors the review process supported by entry-level staff and produces a portfolio-ready artifact.