Q: (from Kirill)
Do you know about password resets – it looks like with Basic, they can reset self-reset passwords, but it doesn’t sync back to their AD, even with DirSync? How does that work?
You are correct, according to the feature set matrix (https://msdn.microsoft.com/en-us/library/azure/dn532272.aspx) with Azure AD Basic you have Self Service Reset, but it does not force the change back to the AD on premises. To do that you will need to look into Azure AD Premium. Details about that process can be found at:
Bottom line – This is a GREAT upsell reason to move from the “free” Azure AD Basic into Azure AD Premium. And now that you’ve opened up the door with Azure AD Premium, you should continue the conversation to include Azure Rights Management (https://technet.microsoft.com/en-us/library/jj585024.aspx) and Mobile Device Management (http://www.microsoft.com/en-us/server-cloud/products/microsoft-intune/default.aspx) and introduce the Enterprise Mobility Suite (http://www.microsoft.com/en-us/server-cloud/enterprise-mobility/overview.aspx) which are now ALL available through Open licensing!