CODEWITHSUNDEEP
azureazure-active-directory
Norrin Rad
Norrin Rad

Reputation: 991

Azure management groups permissions over subscription

I'm trying to configure some management groups in Azure, I have three subscriptions (prod, dev and core), I have three mnagement groups by the same name, I then have six application groups (prod1, prod2, dev1, dev2, core1 and core2), what I;'m trying to work out is whether we can have the root management group, going into three subscription groups, which then go into 2 application groups, per subscription group and then have the two application groups going into one subscription? Or does it not work like that? All the reading I've been doing shows one management group per subscription, but I can't see why we can't do this. Help!!

Image: https://pasteboard.co/IiYTk1a.jpg

Hope that makes sense

Thanks in advance

Upvotes: 0

Views: 486

Answers (1)

Haitham Shaddad
Haitham Shaddad

Reputation: 4456

A subscription can exist in a single management group. You can have hierarchy of groups to have more fine grain control but each group can have a single parent

If you need to control access for multiple users between different subscriptions then you can use a custom RBAC roles and give it a custom permissions.

Upvotes: 1

Related Questions