Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A large enterprise has hundreds of Azure subscriptions across various departments. They need a way to efficiently manage access, enforce policies, and ensure compliance across all these subscriptions, treating them as a single, unified hierarchy. Which Azure governance feature is designed for this overarching management structure?
- AAzure Management Groups
- BAzure Active Directory
- CAzure Blueprints
- DAzure Resource Groups
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Management Groups
Azure Management Groups provide a level of scope above subscriptions, allowing you to organize subscriptions into containers. This hierarchy enables you to apply governance policies and access controls at a higher level, which then inherit down to the subscriptions and resources within them, simplifying management across a large enterprise.
Why the other options are wrong
- B. Azure Active Directory manages identities and access, but Management Groups provide the hierarchical structure for applying governance to subscriptions.
- C. Azure Blueprints define and deploy consistent environments, but Management Groups provide the overarching organizational structure for applying governance to those environments at a corporate level.
- D. Azure Resource Groups logically group resources within a single subscription but do not provide a management hierarchy across multiple subscriptions.
Azure Management Groups
Containers that help you manage access, policies, and compliance across multiple Azure subscriptions. They provide an enterprise-grade management scope above subscriptions.
- Organize subscriptions into a hierarchy.
- Policies and RBAC assignments inherit down.
- Simplifies governance for large organizations.
Memory trick: Group your subscriptions, manage from the top, apply policies universally.