Azure Resource Hierarchy
...
Design considerations :
Provides many structures to support security, lifecyle, management and billing.
Leverage subscriptions as a logical unit of management, aligned to business.
Handle the assignment inheritance.
Management Groups
...
Root Management Groups
Top of the entire hierarchy
Policies applied are considered GLOBAL
Requires Azure AD Global Admin access
Management Group (MG) Hierarchy
Up to 6 levels are supported
1 MG can have multiple children
1 subscription/MG can have only 1 parent
Compliance
Supports policies
Supports RBAC
Supports auditing with activity log
Resource Tagging