Azure Subscriptions and Management Groups
Organizations will often have multiple subscriptions for various reasons. Deciding on the right criteria to create new subscriptions is critical. As the number of subscriptions increases, the governance can become complex, which is where management groups can greatly assist.
Subscriptions
A subscription is a primary building block of your Azure environment. All Azure resources live within a subscription. A subscription provides one level where role-based access control can be configured, which is then inherited by everything that lives within that subscription. Subscriptions can also have policy assigned that is enforced on everything within that subscription. Subscriptions are also a granularity unit within Azure billing, enabling easy ascertainment of cost per subscription. By default, an Azure subscription is also a unit of isolation between certain types of resources. However, where desired, it is becoming far easier to enable cross-subscription...