Microsoft Certified: Azure Solutions Architect ExpertDesign identity, governance, and monitoring solutionsMedium
A multinational corporation is implementing a new governance strategy for its Azure environment. They have multiple subscriptions across different departments and need to enforce consistent policies, such as requiring specific tags on all resources and restricting resource deployments to approved regions. The solution must allow for hierarchical application of these rules. Which Azure service should be used to achieve this?
- AAzure Management Groups
- BAzure Blueprints
- CAzure Policy
- DAzure Resource Groups
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Management Groups
Azure Management Groups provide a hierarchical structure above subscriptions, allowing you to organize subscriptions into containers and apply governance policies like Azure Policy and Azure RBAC at a higher level, which are then inherited by all subscriptions within that management group.
Why the other options are wrong
- B. Azure Blueprints define repeatable sets of Azure resources and policies, but Management Groups provide the overarching hierarchical structure for applying them.
- C. Azure Policy is used to enforce rules, but Management Groups provide the hierarchical scope for applying those policies effectively across multiple subscriptions.
- D. Resource Groups are for organizing resources within a subscription, not for hierarchical governance across subscriptions.
Azure Management Groups
Azure Management Groups are containers that help you manage access, policy, and compliance across multiple Azure subscriptions. They form a hierarchy above subscriptions.
- Provide a hierarchy for organizing subscriptions.
- Policies and RBAC roles applied at a management group level are inherited.
- Up to six levels of hierarchy supported.
Memory trick: Management Groups: The organizational chart for your Azure empire.