Points a DNS name at an IPv4 address. A typical use is pointing a root (apex) domain at an app.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains A record in context, with comparison tables and the common traps.
Terms in this definition
- DNS
The system that turns names into addresses. In Azure, private endpoints depend on private DNS zones, which are queried through 168.63.129.16.
- IPv4
The 32-bit version of IP addressing. It remains the address format you will see most often in log data and threat indicators.
- Apex domain
The bare domain without any subdomain (example.com), also known as the zone apex or root domain. Since a CNAME is not allowed there, routing it to a service like Front Door relies on CNAME flattening or Azure DNS alias records.
- App protection policy
A set of Intune rules on managed apps that safeguards organisational data, for example by demanding a PIN or preventing copy-paste and save-as into personal apps. It works whether or not the device is enrolled.
Related terms
- Alias record
In Azure DNS, a record set that targets an Azure resource itself (say, a CDN endpoint or public IP) rather than a fixed address, so it stays correct whenever that resource gets a new IP. Bare apex domains can use one to reach such a resource.
- Microsoft Entra audit logs
A record of changes made in a Microsoft Entra directory, covering things such as user, group, app and licence updates. Entries are held for a week on Entra Free or a month on P1 or P2, and this log is not the same thing as Purview's unified audit log.
- Microsoft Graph activity logs
With Entra ID P1 or P2, a diagnostic setting can stream a record of each HTTP request your tenant makes to the Microsoft Graph API into the MicrosoftGraphActivityLogs table.
- Power BI activity log
A record across the whole tenant of user actions in Fabric and Power BI. Admins fetch it a single UTC day at a time, going back no more than 28 days, using either the admin REST API Get Activity Events or the Get-PowerBIActivityEvent cmdlet.
- privatelink zone
Private DNS zone holding a private endpoint's A record, named after the privatelink CNAME target of the service, for instance privatelink.database.windows.net for Azure SQL Database. Naming it after the public suffix is wrong.
- Retention label
A Microsoft Purview label placed on a single file or message to control how long it is retained, when it is removed, or both; it can also mark the item as a record. Labels are made available through policies that either publish them for people to choose or apply them automatically.
- RRSIG
A signature record in DNSSEC; one covers every record that shares both a name and a record type.
- try expression
Handles failures in Power Query M three ways. Bare try yields a record showing HasError together with Value or Error; with otherwise, a default is used instead; with catch, a function receives the details of the error.