Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A global enterprise uses Azure for various business units, each with its own subscription. They need to apply common governance policies, such as requiring specific tags on all resources and restricting resource deployments to certain regions, across all these subscriptions in an organized and hierarchical manner. Which Azure feature is best suited for this requirement?
- AAzure Blueprints
- BAzure Resource Groups
- CAzure Management Groups
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Management Groups
Azure Management Groups provide a way to organize subscriptions into containers, allowing for hierarchical application of governance policies, access conditions, and compliance requirements to all subscriptions within the group.
Why the other options are wrong
- A. Azure Blueprints define repeatable sets of Azure resources and policies, but Management Groups are for the hierarchical organization of subscriptions themselves.
- B. Azure Resource Groups organize resources within a single subscription, not across multiple subscriptions.
- D. Azure Policy defines and enforces rules, but Management Groups provide the hierarchical scope for applying these policies over many subscriptions efficiently.
Azure Management Groups
Azure Management Groups are containers that help you manage access, policies, and compliance across multiple Azure subscriptions. They provide a level of organization above subscriptions.
- Hierarchical organization of subscriptions.
- Apply governance policies at scale.
- Supports up to 10,000 management groups.
Memory trick: Management Groups Make Governance Grand.