Microsoft Certified: Azure Administrator AssociateManage Azure identities and governanceHard

A company is consolidating its Azure subscriptions. They have two subscriptions, 'Dev' and 'Test', which currently reside under different Management Groups. They need to move the 'Dev' subscription to the same Management Group as 'Test' to apply a consistent set of policies. What is the prerequisite for moving an Azure subscription between Management Groups?

  1. AAll resources in the subscription must be in the same resource group.
  2. BThe user performing the move must have the 'Owner' role on both the subscription and the target Management Group.
  3. CThe subscription must be empty of all Azure resources.
  4. DAll resource locks on the subscription must be removed.
Show answer & explanation

Correct answer: B. The user performing the move must have the 'Owner' role on both the subscription and the target Management Group.

To move an Azure subscription to another management group, the user performing the action must have the 'Owner' role on both the subscription being moved and the target management group. This ensures proper authorization for the hierarchy change.

Why the other options are wrong

  • A. Resource group organization within the subscription does not impact its ability to be moved between Management Groups.
  • C. Subscriptions do not need to be empty to be moved between Management Groups; they can contain active resources.
  • D. While resource locks can prevent deletion or modification of resources, they typically do not prevent a subscription from being moved between Management Groups.

Move Azure Subscription between Management Groups

The process of re-parenting an Azure subscription to a different Management Group within the Azure Management Group hierarchy.

  • Requires specific RBAC permissions.
  • Policies and RBAC assignments from the new parent group are inherited.
  • Does not impact resources within the subscription.

Memory trick: Moving a subscription requires the 'Owner' key for both the old and new floors of the building.

More Manage Azure identities and governance questions