Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceEasy
A global company uses multiple Azure subscriptions across different departments. They need to apply a consistent set of compliance policies, security baselines, and cost management rules across all subscriptions within a specific business unit. They want to avoid assigning these policies individually to each subscription. Which Azure governance feature should they use to group and manage these subscriptions effectively?
- AAzure Blueprints
- BAzure Management Groups
- CAzure Policy
- DAzure Resource Groups
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Management Groups
Azure Management Groups allow you to organize subscriptions into containers, providing a level of scope above subscriptions. Policies, access controls, and cost management rules can then be applied to the management group, inheriting down to all contained subscriptions, ensuring consistency across a business unit.
Why the other options are wrong
- A. Azure Blueprints define repeatable sets of resources, policies, and role assignments, but Management Groups provide the hierarchical structure for applying them across subscriptions.
- C. Azure Policy enforces rules, but Management Groups provide the scope to apply those policies effectively across multiple subscriptions without individual assignment.
- D. Azure Resource Groups are for organizing resources within a single subscription, not for grouping multiple subscriptions.
Azure Management Groups
A hierarchical structure that allows you to organize multiple Azure subscriptions into containers, enabling governance at scale for policies, access, and compliance.
- Provides a scope above subscriptions.
- Policies and access controls inherit down the hierarchy.
- Facilitates enterprise-scale governance.
Memory trick: Manage groups of subscriptions like a corporate hierarchy.