Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A multinational corporation has multiple Azure subscriptions for different business units and projects. They need to apply a consistent set of governance policies, such as specific tagging requirements and allowed resource types, across all these subscriptions without having to assign policies individually to each one. Which Azure governance feature would you recommend to achieve this hierarchical policy application?
- AAzure Resource Groups
- BAzure Blueprints
- CAzure Management Groups
- DAzure Policy Initiatives
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Management Groups
Azure Management Groups provide a level of scope above subscriptions, allowing you to organize subscriptions into containers. Policies and initiatives assigned to a management group are inherited by all subscriptions and resources within it, ensuring consistent governance across multiple subscriptions.
Why the other options are wrong
- A. Azure Resource Groups organize resources within a single subscription and do not provide a scope above subscriptions.
- B. Azure Blueprints helps deploy consistent environments but doesn't primarily organize subscriptions for hierarchical policy application.
- D. Azure Policy Initiatives (Policy Sets) group multiple policies together, but they still need to be assigned to a scope, and Management Groups provide the hierarchical scope above subscriptions.
Azure Management Groups
Containers that help you manage access, policies, and compliance across multiple Azure subscriptions. They provide a scope above subscriptions, allowing for hierarchical organization.
- Organize subscriptions into a hierarchy.
- Policies and access controls assigned to a management group are inherited by child subscriptions.
- Supports up to six levels of depth in the hierarchy.
Memory trick: Management Groups are like organizational charts for subscriptions.