Azure has hundreds of services. A business with twenty staff needs about six of them, and will be sold twelve.
The useful skill is knowing what each thing is for so you can tell when someone is solving your problem and when they are building something interesting on your money. These are the ten that come up most often in small and medium businesses, with what each actually does and where it stops.
1. Cloud identity and access
Everything else in Azure sits behind Microsoft’s cloud identity service. It holds your user accounts, decides what each one can reach, and enforces conditions like multi-factor authentication and which devices are allowed to sign in. If you already use Microsoft 365, you already have it and you are already relying on it.
Microsoft renamed this service in 2023, keeping all capabilities, licensing and pricing the same. Older guides that talk about Azure Active Directory are describing the same product under its previous name, so don’t let the naming confuse you.
2. Azure Backup
Azure Backup is Microsoft’s native backup service, covering workloads in Azure and on premises through one policy-based setup, without you running backup hardware.
It backs up what you point it at. It does not decide what matters, test that restores work, or notice when a job has been failing quietly for five weeks. Those are jobs for a person, and they are where most backup failures actually happen.
3. Azure Site Recovery
Backup gets your data back. Site Recovery gets your systems running again somewhere else, by replicating workloads so you can fail over when a site or region goes down.
Worth it if a day without your server means a day without revenue. Overkill if your critical systems are already software as a service and your server is a file share. Work out which you are before anyone quotes you.
4. Azure Monitor
Azure Monitor collects metrics and logs from your cloud and hybrid systems so you can see health, performance and reliability in one place, and alert on them.
The value is entirely in whether someone reads the alerts. Monitoring nobody watches is an expense, not a control.
5. Microsoft Defender for Cloud
Defender for Cloud assesses the security posture of your cloud resources and tells you what to fix.
The useful detail for a smaller business: the foundational posture management features are free, including the secure score and the Microsoft cloud security benchmark recommendations. Turn it on, read the recommendations, fix the free ones. The paid Defender plans add threat protection for servers, storage, containers, databases and the rest, and you add those when you have something worth protecting that way.
6. Azure Logic Apps
Logic Apps automates workflows between services and systems with little or no code. Saving attachments somewhere sensible, pushing a form submission into a job system, notifying a team when a record changes.
The trap is automation nobody documented. When the person who built it leaves and it silently stops, the business often notices weeks later. Write down what each workflow does and who owns it.
7. Azure Virtual Desktop and Windows 365
Azure Virtual Desktop puts Windows desktops and applications in Azure so staff can reach them from anywhere. Windows 365 Enterprise does something similar with a fixed per user Cloud PC, which is simpler to price and simpler to run.
For most small businesses, Windows 365 is the sensible starting point. Virtual Desktop earns its complexity when you have many users sharing pooled resources, or software that has to run close to data already in Azure.
8. Azure DevOps
Azure DevOps covers planning work, hosting code, building, testing and deploying. Obviously relevant if you build software. Quietly relevant if you have someone maintaining internal tools, scripts or a website, because right now that work probably lives on one person’s laptop.
9. Microsoft Cost Management
Cost Management is Microsoft’s set of tools for analysing, monitoring and controlling what you spend across Microsoft cloud services, available to anyone with access to the billing account or subscription.
Open it in the first week, not after the first surprising invoice. Azure bills by consumption, and consumption is easy to start and easy to forget.
10. Azure Machine Learning
Azure Machine Learning manages the lifecycle of machine learning projects, training and deploying models.
Be honest about whether you need this. Most small businesses asking about AI want something that reads documents or answers questions, and they are better served by the AI features already in the software they pay for. Azure Machine Learning is for building and running your own models, which is a project with a budget and a team attached.
What to ask an Azure consultant
If you are searching for someone to run Azure for you, the product knowledge is the easy part. These questions sort out the rest:
- What are you putting in Azure, and what stays where it is? A good answer names specific systems and reasons. A weak answer says “the cloud”.
- What will this cost per month once it is running, and what makes that number go up? Consumption pricing means the second half of that question matters more than the first.
- Who holds the administrator accounts, and do we keep our own? Your tenant should be yours, with your own break glass account, regardless of who manages it.
- What happens if we leave? Ask how your data and configuration come back to you, before you sign rather than after.
- What are you not recommending, and why? Anyone who thinks you need all ten of the things above has not listened to your business.
Where to start
Most businesses do not need an Azure strategy. They need one or two problems solved, usually recovery and identity, and a clear view of what it costs to keep them solved.
Do this first: open Defender for Cloud, look at your secure score, and work through the free recommendations. It costs nothing, it is specific to what you actually have, and it will tell you more about your real position than any assessment you pay for.
If you’d like someone to look over the plan before you commit to it, get in touch.