Microsoft Azure Fundamentals (AZ-900)Describe Azure architecture and servicesMedium
A company has several Azure subscriptions across different departments. They want to apply consistent governance policies, access controls, and compliance requirements across all these subscriptions, ensuring a hierarchical structure for easier management and reporting. Which Azure organizational construct should they use?
- AAzure Active Directory Tenants
- BResource Groups
- CManagement Groups
- DAvailability Zones
Show answer & explanationAnswer & explanation
Correct answer: C. Management Groups
Management Groups provide a level of scope above subscriptions. You organize subscriptions into management groups, which you can then apply governance conditions, such as policies and access controls, to. All subscriptions within that management group automatically inherit the conditions applied to the management group, enabling hierarchical management.
Why the other options are wrong
- A. Azure Active Directory (AAD) Tenants are top-level organizational units for managing users and applications, but they don't directly manage Azure subscriptions in a hierarchical governance structure.
- B. Resource Groups are logical containers for Azure resources within a single subscription, not for managing multiple subscriptions.
- D. Availability Zones are physically separate locations within an Azure region, used for high availability of resources, not for organizational governance of subscriptions.
Azure Management Groups
A container for subscriptions that allows you to apply governance conditions, such as policies and access controls, to multiple subscriptions at once, enabling hierarchical management.
- Scope above subscriptions
- Organize subscriptions hierarchically
- Inheritance of policies and access controls
- Simplifies large-scale governance
Memory trick: Management Groups are the executive floors above all departments (subscriptions).