Configuring management groups
Azure management groups help you organize your resources and subscriptions and sit above the subscription layer, which allows for global governance of the Azure platform.
Subscriptions are organized into containers called management groups that allow a transitive flow of common conditions through subscription layers, such as Azure policies and RBAC permissions. This structure should always dictate a form of logical hierarchy structure that should be constructed to allow for a flow of permissions or policies as required by the organization.
The scope of management within Azure is defined as per the following diagram:
Figure 4.38 – Resource management scope
Generally, aligning to a company organogram can help determine structures to be implemented by discerning the desired outcomes from the management group structure, bearing in mind that this may be policy, permission, and/or governance. To support this decision, logical...
