Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A global company uses multiple Azure subscriptions across different departments. They need a centralized mechanism to apply a common set of security policies, compliance standards, and cost management policies across all subscriptions, ensuring consistency. Which Azure feature is designed for this hierarchical management?
- AAzure Policy
- BAzure Management Groups
- CAzure Resource Groups
- DAzure Blueprints
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Management Groups
Azure Management Groups provide a level of scope above subscriptions, enabling you to organize subscriptions into containers to apply governance conditions like policies and access control at scale. This is ideal for a global company with multiple subscriptions requiring centralized management.
Why the other options are wrong
- A. Azure Policy is used to enforce rules, but Management Groups provide the hierarchical scope to apply these policies effectively across many subscriptions.
- C. Azure Resource Groups organize resources within a single subscription and don't provide a hierarchy above subscriptions.
- D. Azure Blueprints define repeatable deployments, but Management Groups provide the organizational structure for applying these at a high level.
Azure Management Groups
A container for subscriptions that allows for hierarchical organization and the application of governance policies, access controls, and compliance standards at scale.
- Organizes subscriptions into a hierarchy.
- Enables governance at scale.
- Supports applying policies and access control.
- Ideal for large enterprises.
Memory trick: Management Groups: The 'M' for 'Master' organization of your subscriptions.