Microsoft cloud for IT architects illustrations

These cloud architecture posters give you information about Microsoft cloud services, including Microsoft 365, Microsoft Entra ID, Microsoft Intune, Microsoft Dynamics 365, and hybrid on-premises and cloud solutions.

IT decision makers and architects can use these resources to determine the ideal solutions for their workloads and to make decisions about core infrastructure components such as networking, identity, and security.

Microsoft 365 Zero Trust deployment plan

This illustration provides a deployment plan for building Zero Trust security with Microsoft 365. Zero Trust is a new security model that assumes breach and verifies each request as though it originated from an uncontrolled network. Regardless of where the request originates or what resource it accesses, the Zero Trust model teaches us to "never trust, always verify."

Item

Description

PDF | Visio Updated March 2024

Use this illustration together with this article: Microsoft 365 Zero Trust deployment plan Related solution guides Deploy your identity infrastructure for Microsoft 365 Recommended identity and device access configurations Manage devices with Intune Evaluate and pilot Microsoft Defender XDR Deploy an information protection solution with Microsoft Purview Deploy information protection for data privacy regulations with Microsoft 365

Intune enrollment options

This guidance helps you decide which enrollment option is best for your endpoints, including options for:

• Windows devices
• macOS
• iOS/iPad
• Android

Item	Description
PDF | Visio Updated June 2022	Related solution guides Manage devices with Intune Microsoft Intune planning guide

Common attacks and how Microsoft capabilities for Zero Trust can protect your organization

Learn about the most common cyber attacks and how Microsoft capabilities for Zero Trust can help your organization at every stage of an attack.

Item

Description

PDF | Visio Updated February 2024

This poster illustrates the path of common attacks and describes which capabilities for Zero Trust can help stop attackers at each stage of an attack. Related solution guides Evaluate and pilot Microsoft Defender XDR Recommended identity and device access configurations Deploy information protection for data privacy regulations with Microsoft 365 Deploy ransomware protection for your Microsoft 365 tenant Insider risk solutions in Microsoft 365

Microsoft cloud identity for IT architects

What IT architects need to know about designing identity for organizations using Microsoft cloud services and platforms.

Item	Description
PDF Updated November 2021	This model contains: Introduction to identity with Microsoft's cloud Microsoft Entra IDaaS capabilities Zero Trust identity and device access policies Integrating on-premises Active Directory Domain Services (AD DS) accounts with Microsoft Entra ID Putting directory components in Azure IaaS AD DS options for workloads in Azure IaaS

Microsoft cloud security for IT architects

What IT architects need to know about security in Microsoft cloud services and platforms.

Item	Description
PDF Updated February 2022	This model contains: Microsoft and customer security responsibilities Identity and device access Threat protection Information protection Cloud app protection

Microsoft cloud networking for IT architects

What IT architects need to know about networking for Microsoft cloud services and platforms.

Item	Description
PDF | Visio Updated August 2020	This model contains: Evolving your network for cloud connectivity Common elements of Microsoft cloud connectivity ExpressRoute for Microsoft cloud connectivity Designing networking for Microsoft SaaS, Azure PaaS, and Azure IaaS

Microsoft hybrid cloud for IT architects

What IT architects need to know about hybrid cloud for Microsoft services and platforms.

Item	Description
PDF | Visio Updated August 2020	This model contains: Microsoft's cloud offerings (SaaS, Azure PaaS, and Azure IaaS) and their common elements Hybrid cloud architecture for Microsoft's cloud offerings Hybrid cloud scenarios for Microsoft SaaS (Office 365), Azure PaaS, and Azure IaaS

Architecture approaches for Microsoft cloud tenant-to-tenant migrations

This series of topics illustrates several architecture approaches for mergers, acquisitions, divestitures, and other scenarios that might lead you to migrate to a new cloud tenant. These topics provide starting-point guidance for enterprise resource planning.

Item	Description
PDF Updated May 2021	This model contains: A mapping of business scenarios to architecture approaches Design considerations Single event migration flow example Phased migration flow example Tenant move or split flow example

Related resources

Get resources to create your own architecture design diagrams: Microsoft 365 architecture icons and templates.

Go to the Azure architecture center.