Configuring Management Groups

Azure management groups help you organize your resources and subscriptions and sit above the subscription layer, which allows global governance of the Azure platform.

Subscriptions are organized into containers called management groups that allow a transitive flow of common conditions through subscription layers, such as Azure policies and RBAC permissions. This structure should always dictate a form of logical hierarchy structure that should be constructed to allow a flow of permissions or policies as required by the organization.

Generally, aligning to a company organogram can help determine structures to be implemented by discerning the desired outcomes from the management group structure, bearing in mind that this may be policy, permission, and/or governance. To support this decision, logical breakdowns should identify the overall hierarchy to be developed in Azure relating to the management and reporting of services. This is usually defined...