Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A multinational corporation has multiple Azure subscriptions for different business units and development environments. They need to apply a consistent set of governance policies and access controls across all these subscriptions, ensuring that new subscriptions automatically inherit these standards. Which Azure feature should they use to achieve this hierarchical governance?
- AAzure Policy
- BAzure Management Groups
- CAzure Blueprints
- DAzure Resource Groups
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Management Groups
Azure Management Groups provide a level of scope above subscriptions, allowing you to organize subscriptions into containers and apply governance conditions, such as policies and access control, to all contained subscriptions. Policies applied at a management group level inherit down to all subscriptions and resources.
Why the other options are wrong
- A. Azure Policy enforces rules and effects on resources and subscriptions, but Management Groups provide the hierarchical structure to apply these policies at scale across multiple subscriptions.
- C. Azure Blueprints define and deploy standardized environments, but Management Groups provide the organizational hierarchy for consistent application of these blueprints or other governance elements across subscriptions.
- D. Azure Resource Groups are used to logically group related resources within a single subscription, not to organize multiple subscriptions for hierarchical governance.
Azure Management Groups
Containers that help you manage access, policy, and compliance across multiple Azure subscriptions. They provide a level of organization above subscriptions.
- Hierarchical organization of subscriptions
- Apply governance at scale
- Policies and RBAC inherit down
Memory trick: Manage groups, manage the whole family.