Subscriptions and management groups in Azure - Mini Project: Build & Apply

Organizing Azure Subscriptions with Management Groups

📖 Scenario: You are working as a cloud administrator for a company that has multiple Azure subscriptions. To manage policies and access efficiently, you want to organize these subscriptions into management groups.This will help you apply governance rules at a higher level and keep your cloud environment tidy.

🎯 Goal: Create a hierarchy of Azure management groups and assign existing subscriptions to these groups using Azure CLI commands.

📋 What You'll Learn

Create a root management group named CorpRoot

Create two child management groups named DevGroup and ProdGroup under CorpRoot

Assign the subscription with ID 11111111-1111-1111-1111-111111111111 to DevGroup

Assign the subscription with ID 22222222-2222-2222-2222-222222222222 to ProdGroup

💡 Why This Matters

🌍 Real World

Companies use management groups to organize multiple Azure subscriptions for centralized policy and access management.

💼 Career

Cloud administrators and architects need to manage subscriptions efficiently to maintain security and compliance.

1

Create the root management group

Use the Azure CLI command to create a management group named CorpRoot as the root of your hierarchy. Type the command starting with az account management-group create --name CorpRoot.

Azure

# Use Azure CLI to create the root management group named CorpRoot
# Your code here

Need a hint?

Use az account management-group create with the --name parameter.

2

Create child management groups under CorpRoot

Create two child management groups named DevGroup and ProdGroup under the root group CorpRoot. Use the Azure CLI command az account management-group create with --name and --parent CorpRoot for each group.

Azure

az account management-group create --name CorpRoot
# Create DevGroup under CorpRoot
# Your code here

Need a hint?

Use --parent CorpRoot to specify the parent management group.

3

Assign subscriptions to the child management groups

Assign the subscription with ID 11111111-1111-1111-1111-111111111111 to the management group DevGroup and the subscription with ID 22222222-2222-2222-2222-222222222222 to ProdGroup. Use the Azure CLI command az account management-group subscription add with --name for the group and --subscription for the subscription ID.

Azure

az account management-group create --name CorpRoot
az account management-group create --name DevGroup --parent CorpRoot
az account management-group create --name ProdGroup --parent CorpRoot
# Assign subscription 11111111-1111-1111-1111-111111111111 to DevGroup
# Your code here

Need a hint?

Use az account management-group subscription add with the correct --name and --subscription values.

4

Verify the management group hierarchy

Use the Azure CLI command az account management-group show --name CorpRoot to verify the management group hierarchy and confirm that the subscriptions are assigned correctly.

Azure

az account management-group create --name CorpRoot
az account management-group create --name DevGroup --parent CorpRoot
az account management-group create --name ProdGroup --parent CorpRoot
az account management-group subscription add --name DevGroup --subscription 11111111-1111-1111-1111-111111111111
az account management-group subscription add --name ProdGroup --subscription 22222222-2222-2222-2222-222222222222
# Verify the management group hierarchy
# Your code here

Need a hint?

Use az account management-group show with the root group name to see the hierarchy.