Sajal Choudhary

Management Groups

AZURE GOVERNANCE
  1. a hierarchy that can be created for better management of subscriptions
    1. All subscriptions under a management group inherit the conditions applied to the management group
  2. A management group can have 6 levels of depth. It does not include the root MG. root MG has the same ID as tenant AAD ID.
  3. by default all subscriptions get added to root MG.
  4. 1 MG can have only 1 parent, but multiple children

references:

Updated . Thoughts? Email me.

Paths into this note

5 notes lead here

  • Azure Resource Lock TIL

    No lock at management group level

  • Azure Policy TIL

    which is then assigned to a scope (subscription,resource groups,management group or resources)

  • Azure RBAC TIL

    Applies to all items in control plane (management groups,resource groups, resources)

  • Governance Overview TIL

    At root management group level for example, you want broad policies that need to apply. Least restrictive. And so on.

  • Azure Master TIL