Azure Resources
Azure Resource Hierarchy
Design considerations :
Provides many structures to support security, lifecyle, management and billing.
Leverage subscriptions as a logical unit of management, aligned to business.
Handle the assignment inheritance.
Management Groups
Root Management Groups
Top of the entire hierarchy
Policies applied are considered GLOBAL
Requires Azure AD Global Admin access
Management Group (MG) Hierarchy
Up to 6 levels are supported
1 MG can have multiple children
1 subscription/MG can have only 1 parent
Compliance
Supports policies
Supports RBAC
Supports auditing with activity log
Resource Tagging
Custom Information : Name/Value text pairs for storing information about your resources
Applying Tags : 1 or more tags can be applied to supported resources, resource groups and subscriptions
Use Cases : monitoring, cost management, automation, management, etc.