MS-102 vs AZ-104: Which Microsoft Certification Should You Choose in 2026?

Choose MS-102 if your daily work is Microsoft 365 tenant administration, identity, security, and compliance across Exchange, Teams, SharePoint, Entra ID, Defender, and Purview. That makes you a Microsoft 365 admin. Choose AZ-104 if your daily work is Azure infrastructure such as virtual machines, storage accounts, virtual networks, and resource governance. That makes you an Azure admin. MS-102 is an expert-level credential built for people who already run an M365 tenant. AZ-104 is an associate-level credential built for people who provision and maintain Azure cloud infrastructure. Exam pricing is set by the country or region where you test, and both are renewed annually through a free Microsoft Learn assessment, and both are strong career investments. The decision comes down to whether your job lives in the Microsoft 365 SaaS layer or the Azure IaaS layer, not which exam sounds more impressive.

Microsoft has confirmed that the current MS-102 certification and its exam will retire in October 2026

Before you plan a study schedule, know this. Microsoft has confirmed that the current MS-102 certification and its exam will retire in October 2026. After that date, you will no longer be able to earn or renew this certification, and the credential will be replaced by whatever successor path Microsoft announces. If you are already working toward Microsoft 365 Certified: Administrator Expert, this gives you roughly a two-month window from today to sit the exam under the current objectives. If you are starting to research this path, factor the retirement date into your decision before you buy a course or book a testing slot. AZ-104 carries no retirement notice at the time of writing and remains an active, ongoing certification.

MS-102 vs AZ-104 at a Glance

What Is MS-102? Exam Domains and Certification Details

MS-102, officially Microsoft 365 Certified: Administrator Expert, replaced the old MS-100 and MS-101 pairing. It is the highest credential available on the Microsoft 365 administration track, and unlike AZ-104, it has a hard prerequisite. Microsoft requires you already to hold at least one of four specific associate-level certifications before you can earn MS-102: Microsoft 365 Certified Endpoint Administrator Associate, Microsoft 365 Certified Teams Administrator Associate, Microsoft Certified Identity and Access Administrator Associate, or Microsoft Certified Information Security Administrator Associate. You must hold at least one of these four prerequisite certifications to earn the Microsoft 365 Administrator Expert certification.

The exam covers four main domains:

• Deploy and manage a Microsoft 365 tenant: tenant settings, user accounts and licensing, Exchange Online, SharePoint Online, OneDrive, and Teams administration.
• Implement and manage identity and access: Microsoft Entra ID, hybrid identity through Entra Connect, Conditional Access, MFA, passwordless sign-in, and Privileged Identity Management.
• Manage security and threats: Microsoft Defender for Office 365, Endpoint, and Identity, plus Secure Score, alerts, and incident response inside the Defender portal.
• Manage compliance: Microsoft Purview, data loss prevention, sensitivity labels, retention policies, eDiscovery, and audit logging.

In practice, MS-102 is less about clicking through the admin center and more about understanding how identity, security, and compliance decisions interact across an entire tenant. It rewards people who have actually run production M365 environments, not just watched a training video. Working through scenario-based MS-102 exam questions sets is a good way to test that judgment before exam day.

What Is AZ-104? Exam Domains Explained

AZ-104, Microsoft Azure Administrator Associate, validates the ability to implement, manage, and monitor an organization's Azure environment. It sits at the associate level but has a reputation for being one of the harder associate exams Microsoft publishes, largely because of its scope and its hands-on, scenario-based AZ-104 questions.

The exam covers five main domains.

• Manage Azure identities and governance: Entra ID users and groups, subscriptions, resource groups, Azure Policy, RBAC, and cost management.
• Implement and manage storage: storage accounts, Blob storage, Azure Files, SAS tokens, and redundancy configuration.
• Deploy and manage compute resources: virtual machines, VM scale sets, App Service, and basic AKS administration.
• Implement and manage virtual networking: virtual networks, subnets, peering, NSGs, load balancers, Application Gateway, VPN Gateway, and Azure DNS.
• Monitor and maintain resources: Azure Monitor, Log Analytics, alerts, Azure Backup, and Site Recovery.

AZ-104 is not a formal prerequisite for AZ-305, Azure Solutions Architect Expert, but Microsoft and most training paths treat it as the practical starting point, since AZ-305 assumes the infrastructure knowledge AZ-104 validates.

MS-102 vs AZ-104: Key Differences Explained

The cleanest way to separate these two exams is to ask where your responsibility actually sits.

MS-102 lives in the SaaS productivity layer. You are managing the platform employees use every day: mailboxes, Teams policies, SharePoint sites, device compliance signals, and the security and compliance controls wrapped around all of it. When something breaks, it is usually a mailbox, a policy, or an access issue.

AZ-104 focuses on administering Azure infrastructure and platform resources. You are managing the infrastructure other services run on top of: networks, storage, compute, and the governance model that keeps a growing Azure estate from becoming unmanageable. When something breaks, it is usually a misconfigured network, an over-permissive role assignment, or a missing backup.

Both exams touch Microsoft Entra ID, but they approach it differently rather than testing identical content. An AZ-104 administrator owns the tenant's identity infrastructure and configures hybrid identity, custom domains, and RBAC for Azure resources. An MS-102 administrator consumes that identity layer to secure M365 access, enforce Conditional Access on collaboration tools, and manage governance across the tenant. Studying one gives you a head start on the identity concepts in the other, but the rest of each exam's content covers different grounds.

MS-102 vs AZ-104: Which Exam Is Harder?

MS-102 may feel harder for candidates because it combines Microsoft 365 tenant administration, identity, security, and compliance across a broad set of services. Typical study time runs 80 to 150 hours over six to twelve weeks.

AZ-104 is associate level but has a reputation for being technical. Its difficulty comes from breadth, and Microsoft notes the exam may include interactive, hands-on components in addition to standard questions, which reward candidates with real Azure subscription experience rather than memorization. Typical study time runs 60 to 120 hours over four to eight weeks.

In practice, the harder exam is whichever one is further from your daily work. An M365 admin with a year of hands-on tenant experience will find MS-102 demanding but familiar. A sysadmin who has never touched Azure will find AZ-104's networking and compute sections genuinely difficult, regardless of its associate label. Treat "which is harder" as a comparison shaped by your background, not a fixed fact.

MS-102 vs AZ-104: Career Paths to Consider

MS-102 track: entry-level M365 Administrator roles, moving toward mid-level Microsoft 365 Engineer or Messaging Engineer work, and eventually senior M365 Architect or Modern Workplace Architect positions.

AZ-104 track: entry-level Azure Administrator or Cloud Support Engineer roles, moving toward mid-level Cloud Engineer or Azure Infrastructure Engineer work, and eventually Azure Solutions Architect positions once paired with AZ-305.

Exact salary figures vary widely by country, city, employer size, and years of experience, so treat any specific number you see quoted online as a rough regional data point rather than a guarantee. Both certifications sit inside certification families that consistently show up in enterprise IT hiring, and MS-102 holders in particular remain highly valued inside large organizations that run complex M365 deployments, especially when paired with security or compliance expertise.

Should You Get Both MS-102 and AZ-104?

MS-102 and AZ-104 are not competing exams. Many enterprise IT professionals hold both because real organizations run Azure and Microsoft 365 side by side, often in hybrid configurations with on-premises Active Directory still in the mix.

If you are weighing both right now, the MS-102 retirement date should move it up your priority list, not down. Get both if you work on a team responsible for the full Microsoft stack, or if you are aiming for a senior generalist or IT architect role.

Start with AZ-104 if you currently manage Azure resources, want to progress toward AZ-305, or are moving from on-premises sysadmin work into cloud engineering. Azure fluency also makes MS-102's Entra Connect and hybrid identity content easier to absorb later.

Start with MS-102 if you already run Microsoft 365 day to day and want to validate expert-level skills before expanding into Azure infrastructure, and note that you will need one of the four prerequisite associate certifications in place first.

MS-102 vs AZ-104: Recommendations by Current Role

• Microsoft 365 or Office 365 administrators managing Exchange, SharePoint, and Teams: go straight for MS-102. It validates work you already do and opens senior M365 roles.
• On-premises sysadmins and Windows Server admins: take AZ-104 first. Infrastructure skills transfer directly, and Azure administration roles are widely posted across the current job market.
• Cloud engineers and DevOps engineers: prioritize AZ-104, then AZ-305. MS-102 only adds value if the organization is heavily invested in M365 alongside Azure.
• Enterprise IT managers and directors: MS-102 often delivers more immediate value, since governance, compliance, and security policy sit closer to leadership responsibility than hands-on infrastructure work.
• Help desk and junior IT support staff: build a foundation first with AZ-900 or MS-900, then revisit AZ-104 or MS-102 after a year or two of hands-on admin experience.

MS-102 Study Guide and AZ-104 Study Plan

For AZ-104, spend roughly equal time on identity and governance, storage, compute, networking, and monitoring. Most candidates over-study virtual machines because they feel familiar and under-study governance, which is exactly backward for how the exam is weighted. Build a small lab, break things on purpose, and read the resulting logs.

For MS-102, build tenant-wide thinking rather than memorizing menu locations. Understand how identity synchronization, Conditional Access, Defender XDR alerts, and Purview retention policies interact, because the exam's case studies test judgment across these areas together, not isolated facts.

Frequently Asked Questions

Is MS-102 retiring?
Yes. Microsoft has confirmed that MS-102 and the Microsoft 365 Certified: Administrator Expert certification will retire in October 2026. You must complete the exam before the retirement date for it to count toward the certification. Check Microsoft Learn for the current status and any announced successor path before you commit to a long study plan.

Is MS-102 harder than AZ-104?
Generally yes, since MS-102 is expert level and covers tenant administration, identity, security, and compliance in one exam. AZ-104 is associate level but still demanding because of its scope and its hands-on, scenario-heavy networking and compute content. Which one feels harder usually depends on which platform you already work in.

What is MS-102 certification?
MS-102 is the exam for the Microsoft 365 Certified: Administrator Expert credential, covering tenant management, Entra identity, Microsoft Defender security, and Purview compliance for enterprise Microsoft 365 environments. It requires one of four associate-level prerequisite certifications before you can attempt it.

Does AZ-104 help with MS-102?
Yes, to an extent. Both exams touch Microsoft Entra ID, Conditional Access, MFA, and role-based access control, though from different administrative angles. Studying AZ-104 first can make MS-102's identity domain feel more familiar, but the rest of each exam covers largely separate ground.

How should I study for MS-102?
Start from Microsoft's official skills outline, work through Microsoft Learn modules for tenant administration, identity, Defender, and Purview, then reinforce weak domains with timed practice questions before exam day. Given the retirement date, confirm your prerequisite certification is already in place before you schedule anything.

Do MS-102 and AZ-104 expire?
Both certifications are valid for one year and renew through a free online assessment on Microsoft Learn. For MS-102 specifically, this only applies up to its October 2026 retirement date; after that, renewal will depend on whatever successor certification Microsoft announces.

Is AZ-104 a prerequisite for AZ-305?
Not officially. Microsoft does not enforce it as a formal requirement, but AZ-305 assumes deep Azure infrastructure knowledge, and most candidates who skip AZ-104 struggle with its architecture design questions. In practice, most learners treat it as the de facto starting point.