Azure Resources

Azure Resource Hierarchy

Design considerations :

• Provides many structures to support security, lifecyle, management and billing.

• Leverage subscriptions as a logical unit of management, aligned to business.

• Handle the assignment inheritance.

Management Groups

1. Root Management Groups

   1. Top of the entire hierarchy

   2. Policies applied are considered GLOBAL

   3. Requires Azure AD Global Admin access

2. Management Group (MG) Hierarchy

   1. Up to 6 levels are supported

   2. 1 MG can have multiple children

   3. 1 subscription/MG can have only 1 parent

3. Compliance

   1. Supports policies

   2. Supports RBAC

   3. Supports auditing with activity log

Resource Tagging