The Azure certification path: where to start and what comes next

The tier structure: Fundamentals, Associate, Expert, Specialty

Microsoft organises Azure certifications into four levels. Fundamentals certifications — AZ-900 Azure Fundamentals being the flagship — are broad literacy exams that assume no hands-on experience and cover concepts, core services and governance. Associate certifications are role-based and technical: AZ-104 Azure Administrator for running Azure environments, DP-700 Fabric Data Engineer for data engineering on Microsoft Fabric, and others across development, security and AI. They assume real working knowledge.

Expert certifications — such as AZ-305 Azure Solutions Architect Expert — sit above the associates and assume substantial experience; some formally require an associate certification first. Specialty certifications cover narrow domains rather than broad roles. For most people the path in practice involves only the first two or three levels, entered at whichever point matches their experience.

Role-based, not a ladder

The single most important thing to understand about Microsoft’s scheme is that it is role-based. The associate tier is not one exam you must pass to proceed; it is a menu of certifications, each aligned to a job function. An administrator, a developer, a data engineer and a security engineer would each take a different associate exam, and none of them is “ahead” of the others.

That changes how you should plan. The question is not “which certification comes next in the sequence” but “which role am I working towards”. Someone aiming at infrastructure operations points at AZ-104; someone aiming at data engineering points at DP-700; the paths only share their starting point. Collecting associates across roles you do not intend to work in adds little — depth in your actual role is worth more than breadth across everyone else’s.

The sensible default route

For someone new to Azure or to the cloud generally, the default route is straightforward:

1. Start with AZ-900 Azure Fundamentals — broad, beginner-designed literacy in cloud concepts and core Azure services, studied free on Microsoft Learn. It never expires, so it stays on your CV permanently.
2. Build hands-on experience with a free Azure account — certifications without practical skill impress no one at interview, and the associate exams assume real experience anyway.
3. Take the role-based Associate that matches your target job — AZ-104 Azure Administrator is the classic infrastructure route; DP-700 Fabric Data Engineer suits the data path; other associates cover development, security and AI.
4. Consider an Expert certification later — AZ-305 Solutions Architect Expert and its peers are for practitioners with real depth, typically after years of hands-on work, not months.

Prerequisites: assumed, not enforced

Microsoft does not generally stop you booking an exam above your level — AZ-900 is not a formal prerequisite for AZ-104, and experienced practitioners routinely skip straight to an associate. A small number of Expert certifications do formally require an associate first, but for most of the path the gate is practical rather than administrative.

The tiers assume growing experience, though, and the assumption has teeth. Associate exams present scenario questions — and sometimes case studies — that are very difficult to reason through without having actually worked with the services. Skipping Fundamentals is sensible when you have hands-on experience; skipping the experience itself is how people fail associate exams. If you are choosing between AZ-900 and AZ-104 as a first exam, our comparison of the two covers that decision in detail.

The renewal reality: a path is a recurring commitment

Azure’s validity rules shape the path more than most beginners expect. Fundamentals certifications like AZ-900 never expire — pass once and it is yours permanently. But role-based and specialty certifications, including every associate and expert, expire after one year. They are renewed free of charge through an online, unproctored renewal assessment on Microsoft Learn, available in the six months before expiry, with unlimited attempts and no fee.

In practice this is far friendlier than it first sounds — the renewal is a short open-book-style assessment you take from home, not a re-sit of the full proctored exam, and it keeps your knowledge current as Azure evolves. But it does mean an Azure certification path is something you maintain, not something you finish. This contrasts sharply with AWS, whose certifications last three years but whose renewal means paying for and passing a full exam again. Plan for the annual check-in, and the maintenance is genuinely light; Microsoft Learn documents the current process.

Choosing your own path

Strip the scheme back and the guidance is simple. New to cloud entirely: AZ-900 first — it is the on-ramp built for you, and its non-expiring credential is a permanent CV (resume) line. Already hands-on with Azure or experienced in infrastructure: go straight to the associate for your role, most commonly AZ-104. Aiming at data work on Microsoft’s stack: DP-700 is the Fabric-era data engineering credential. Expert certifications can wait until the experience they assume is real.

Above all, let the target role choose the certification rather than the other way round. Read job adverts for the roles you actually want and note which certifications they mention — that evidence beats any generic ranking, including this one. A certification earns its value when it matches work you can do and want to do; a path built on that principle is short, coherent and worth every renewal.