Question

Difficulty: MediumAzure Resources, Resource Groups, Subscriptions, and Management Groups

An administrator is designing a governance strategy for a multi-subscription Azure environment. Determine whether the following statement is true or false: Any Azure Policy applied to a parent management group is automatically inherited by all resource groups and resources in all subscriptions nested under that management group.

Answer: Answer

Answer

The statement is true because Azure Policy assignments inherit downward through the management group hierarchy to all nested subscriptions, resource groups, and resources.

Any Azure Policy applied at a management group scope is inherited by all descendant resources, including subscriptions, resource groups, and individual resources.

Step-by-Step Solution

1

Identify the scope of the Azure Policy assignment in the scenario.

The policy is assigned at the parent management group level, which is a scope above subscriptions.

Management groups allow organizations to manage access, policy, and compliance for multiple subscriptions.

2

Determine how policy inheritance operates down the Azure resource hierarchy.

Any policies or RBAC roles assigned to a management group flow down to all subscriptions nested under it, and subsequently to all resource groups and resources within those subscriptions.

Azure enforces a strict hierarchical inheritance model for governance, ensuring consistent compliance controls across resources.

Key Concept

Azure Management Groups policy inheritance

Rate this question

Topics

Azure Resources, Resource Groups, Subscriptions, and Management Groups