I had joined a Databricks engagement from the Azure infrastructure side — Terraform, identity, pipelines — rather than from notebooks. The meetup was a compressed version of that delivery work. I am expanding the same material into a longer whitepaper with diagrams; this post is the short form from right after the talk.

Instead of opening with enterprise vocabulary, I used a simple story: imagine you and a few colleagues just founded a student association, or a first small startup after graduation. You need a place to manage accounts, shared mail, maybe an app or two, and eventually something you deploy for users — but nobody has done “company cloud” before. Walking through that scenario made it easier to explain what a tenant is, why Entra groups exist, and why Microsoft separates a platform landing zone (shared identity and foundation) from an application landing zone (where your product actually runs). Register the association’s domain, add members, set who can do what, then think about subscriptions and resources — same building blocks, smaller scale than a bank, but the same ideas.