Governance
CoreAzure management groups
Hierarchy above subscriptions for inherited access and policy.
Key points
- Management groups organize subscriptions so policy and role assignments can inherit across durable organizational boundaries.
- A hierarchy change can alter effective governance and access even when the resources themselves do not move.
Best-known use cases
- Apply shared corporate controls above subscriptions while keeping regulated or delegated units in distinct branches.
What candidates often confuse it with
- Management groups govern subscription hierarchy; resource groups are lifecycle containers inside one subscription.
Key takeaway
Use management groups for inherited controls that must span multiple subscriptions.
Relevant exam tasks
- D1.3.S1 — Recommend a structure for management groups, subscriptions, and resource groups, and a strategy for resource tagging